CVE-2026-68356

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-68356", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-30T09:28:09.385Z", "datePublished": "2026-08-10T12:03:33.280Z", "dateUpdated": "2026-08-17T05:03:59.392Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-17T05:03:59.392Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwatchdog: airoha: Prevent division by zero when clock frequency is zero\n\nclk_get_rate() can return 0 when the clock provider is not properly\nconfigured or the clock is unmanaged. The driver uses wdt_freq as a\ndivisor directly in airoha_wdt_probe() to compute max_timeout and in\nairoha_wdt_get_timeleft() to compute the remaining time, which results\nin a division by zero.\n\nAdd a check for wdt_freq == 0 in probe and return -EINVAL with\ndev_err_probe() to prevent the division by zero and provide a\ndiagnostic message."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/watchdog/airoha_wdt.c"], "versions": [{"version": "3cf67f3769b8227ca75ca7102180a2e270ee01aa", "lessThan": "8681e5addf7171602616e256a09057697dcc75ca", "status": "affected", "versionType": "git"}, {"version": "3cf67f3769b8227ca75ca7102180a2e270ee01aa", "lessThan": "57c3f5bd5be008cd5b4ff6a45b7cb90f5ca45a37", "status": "affected", "versionType": "git"}, {"version": "3cf67f3769b8227ca75ca7102180a2e270ee01aa", "lessThan": "bcfcd7619f277842430d197556463b401b839ee9", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/watchdog/airoha_wdt.c"], "versions": [{"version": "6.13", "status": "affected"}, {"version": "0", "lessThan": "6.13", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.42", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.6", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.13", "versionEndExcluding": "6.18.42"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.13", "versionEndExcluding": "7.1.6"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.13", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/8681e5addf7171602616e256a09057697dcc75ca"}, {"url": "https://git.kernel.org/stable/c/57c3f5bd5be008cd5b4ff6a45b7cb90f5ca45a37"}, {"url": "https://git.kernel.org/stable/c/bcfcd7619f277842430d197556463b401b839ee9"}], "title": "watchdog: airoha: Prevent division by zero when clock frequency is zero", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/watchdog/airoha_wdt.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "8681e5addf7171602616e256a09057697dcc75ca", "status": "affected", "version": "3cf67f3769b8227ca75ca7102180a2e270ee01aa", "versionType": "git"}, {"lessThan": "57c3f5bd5be008cd5b4ff6a45b7cb90f5ca45a37", "status": "affected", "version": "3cf67f3769b8227ca75ca7102180a2e270ee01aa", "versionType": "git"}, {"lessThan": "bcfcd7619f277842430d197556463b401b839ee9", "status": "affected", "version": "3cf67f3769b8227ca75ca7102180a2e270ee01aa", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/watchdog/airoha_wdt.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.13"}, {"lessThan": "6.13", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.42", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.6", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwatchdog: airoha: Prevent division by zero when clock frequency is zero\n\nclk_get_rate() can return 0 when the clock provider is not properly\nconfigured or the clock is unmanaged. The driver uses wdt_freq as a\ndivisor directly in airoha_wdt_probe() to compute max_timeout and in\nairoha_wdt_get_timeleft() to compute the remaining time, which results\nin a division by zero.\n\nAdd a check for wdt_freq == 0 in probe and return -EINVAL with\ndev_err_probe() to prevent the division by zero and provide a\ndiagnostic message."}], "id": "CVE-2026-68356", "lastModified": "2026-08-17T06:17:43.890", "metrics": {}, "published": "2026-08-10T13:20:28.050", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/57c3f5bd5be008cd5b4ff6a45b7cb90f5ca45a37"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/8681e5addf7171602616e256a09057697dcc75ca"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/bcfcd7619f277842430d197556463b401b839ee9"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: Linux kernel: airoha watchdog driver vulnerable to Denial of Service via division by zero", "id": "2513239", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2513239"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.4", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-369", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nwatchdog: airoha: Prevent division by zero when clock frequency is zero\nclk_get_rate() can return 0 when the clock provider is not properly\nconfigured or the clock is unmanaged. The driver uses wdt_freq as a\ndivisor directly in airoha_wdt_probe() to compute max_timeout and in\nairoha_wdt_get_timeleft() to compute the remaining time, which results\nin a division by zero.\nAdd a check for wdt_freq == 0 in probe and return -EINVAL with\ndev_err_probe() to prevent the division by zero and provide a\ndiagnostic message.", "A flaw was found in the Linux kernel's airoha watchdog driver. This vulnerability occurs when the clock frequency is zero, causing the driver to attempt a division by zero. This can lead to a system crash, resulting in a denial of service for the affected system."], "name": "CVE-2026-68356", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:enterprise_linux_nvidia:", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux for NVIDIA 26"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "rhcos", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-08-10T12:03:33Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-68356\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-68356\nhttps://git.kernel.org/stable/c/57c3f5bd5be008cd5b4ff6a45b7cb90f5ca45a37\nhttps://git.kernel.org/stable/c/8681e5addf7171602616e256a09057697dcc75ca\nhttps://git.kernel.org/stable/c/bcfcd7619f277842430d197556463b401b839ee9"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3cf67f3769b8227ca75ca7102180a2e270ee01aa,8681e5addf7171602616e256a09057697dcc75ca)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3cf67f3769b8227ca75ca7102180a2e270ee01aa,57c3f5bd5be008cd5b4ff6a45b7cb90f5ca45a37)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3cf67f3769b8227ca75ca7102180a2e270ee01aa,bcfcd7619f277842430d197556463b401b839ee9)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.13"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,6.13)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.42,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.1.6,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2-rc5,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-10T15:45:03.652212+00:00", "updated": "2026-08-12T19:00:08.257963+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}