{"id":"CVE-2026-98722","aliases":[],"cve":{"records":[{"id":"CVE-2026-98722","source":"Linux","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-25T10:25:14.366Z","published":"2026-10-18T15:46:58.093Z","modified":"2026-10-30T12:39:05.611Z"}],"publishers":[{"name":"Linux","role":"CNA","organizationId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","modified":"2026-10-30T12:39:05.611Z"}],"references":[{"url":"https://git.kernel.org/stable/c/c8004de07739fa9a39e310e859384f1458d7d076","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/7ad5287e58d7aa1a848105f119e6c5b00446882f","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/fd73c079abc58e10183a4db4dc9dc5012db17476","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/bff83b723e93acc788bd690dc4bc1f6f4356c35b","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/826170a49ca1315af6b293a02200585b1e2186d9","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/a991c28066e7ba4da7450bb04478849f7ac6a14a","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/21d0f05989bf0d5cef57b467a7fa4feefbd7236a","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/b5965c4221165045e19736794ca5f48ae3d67142","tags":[],"source":"Linux"}],"weaknesses":[],"applicability":[{"source":"Linux","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.15","versionEndExcluding":"5.10.273"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.15","versionEndExcluding":"5.15.224"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.15","versionEndExcluding":"6.1.191"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.15","versionEndExcluding":"6.6.160"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.15","versionEndExcluding":"6.12.113"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.15","versionEndExcluding":"6.18.56"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.15","versionEndExcluding":"7.2.10"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.15","versionEndExcluding":"7.3"}]}]}]}],"prioritization":[]},"title":"mtd: block2mtd: Fix divide error when erase_size is zero","titleSource":"Linux","descriptionSource":"Linux","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: block2mtd: Fix divide error when erase_size is zero\n\nThe erase size is parsed from the \"block2mtd\" module parameter and can\nbe set to zero. add_device() then evaluates\n\n        if (size % erase_size)\n\nwith a zero divisor, which triggers a divide error:\n\ndivide error: 0000 [#1] PREEMPT SMP PTI\nRIP: 0010:add_device drivers/mtd/devices/block2mtd.c:296 [inline]\nRIP: 0010:block2mtd_setup2+0x592/0xda0 drivers/mtd/devices/block2mtd.c:459\nCall Trace:\nblock2mtd_setup+0x27/0xe0 drivers/mtd/devices/block2mtd.c:476\nparam_attr_store+0x214/0x310 kernel/params.c:589\nmodule_attr_store+0x65/0x90 kernel/params.c:904\nkernfs_fop_write_iter+0x3a4/0x540 fs/kernfs/file.c:345\n...\n\nReject a zero erase size before performing the modulo operation so the\nexisting \"erasesize must be a divisor of device size\" error path\nreports the invalid argument and frees the device.","score":null,"severity":"unknown","published":"2026-10-18T15:46:58.093Z","modified":"2026-10-30T12:39:05.611Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Linux","name":"Linux","platforms":[],"versions":[{"version":"ea6d833a3fddcd1d60414d48f34c7f4fbe88608f","status":"affected","lessThan":"c8004de07739fa9a39e310e859384f1458d7d076","versionType":"git"},{"version":"ea6d833a3fddcd1d60414d48f34c7f4fbe88608f","status":"affected","lessThan":"7ad5287e58d7aa1a848105f119e6c5b00446882f","versionType":"git"},{"version":"ea6d833a3fddcd1d60414d48f34c7f4fbe88608f","status":"affected","lessThan":"fd73c079abc58e10183a4db4dc9dc5012db17476","versionType":"git"},{"version":"ea6d833a3fddcd1d60414d48f34c7f4fbe88608f","status":"affected","lessThan":"bff83b723e93acc788bd690dc4bc1f6f4356c35b","versionType":"git"},{"version":"ea6d833a3fddcd1d60414d48f34c7f4fbe88608f","status":"affected","lessThan":"826170a49ca1315af6b293a02200585b1e2186d9","versionType":"git"},{"version":"ea6d833a3fddcd1d60414d48f34c7f4fbe88608f","status":"affected","lessThan":"a991c28066e7ba4da7450bb04478849f7ac6a14a","versionType":"git"},{"version":"ea6d833a3fddcd1d60414d48f34c7f4fbe88608f","status":"affected","lessThan":"21d0f05989bf0d5cef57b467a7fa4feefbd7236a","versionType":"git"},{"version":"ea6d833a3fddcd1d60414d48f34c7f4fbe88608f","status":"affected","lessThan":"b5965c4221165045e19736794ca5f48ae3d67142","versionType":"git"}],"defaultStatus":"unaffected","cpes":[],"source":"Linux","url":"https://www.cve.org/CVERecord?id=CVE-2026-98722"},{"vendor":"Linux","name":"Linux","platforms":[],"versions":[{"version":"3.15","status":"affected"},{"version":"0","status":"unaffected","lessThan":"3.15","versionType":"semver"},{"version":"5.10.273","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.224","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.191","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.160","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.113","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.56","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.2.10","status":"unaffected","lessThanOrEqual":"7.2.*","versionType":"semver"},{"version":"7.3","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"defaultStatus":"affected","cpes":[],"source":"Linux","url":"https://www.cve.org/CVERecord?id=CVE-2026-98722"}],"remediation":[],"references":["https://git.kernel.org/stable/c/c8004de07739fa9a39e310e859384f1458d7d076","https://git.kernel.org/stable/c/7ad5287e58d7aa1a848105f119e6c5b00446882f","https://git.kernel.org/stable/c/fd73c079abc58e10183a4db4dc9dc5012db17476","https://git.kernel.org/stable/c/bff83b723e93acc788bd690dc4bc1f6f4356c35b","https://git.kernel.org/stable/c/826170a49ca1315af6b293a02200585b1e2186d9","https://git.kernel.org/stable/c/a991c28066e7ba4da7450bb04478849f7ac6a14a","https://git.kernel.org/stable/c/21d0f05989bf0d5cef57b467a7fa4feefbd7236a","https://git.kernel.org/stable/c/b5965c4221165045e19736794ca5f48ae3d67142"],"sources":[{"name":"CVE","id":"CVE-2026-98722","modified":"2026-10-30T12:39:05.611Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-98722"}],"assessments":[],"sourceAffected":[],"observedAt":"2026-10-30T14:04:29.365Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T00:05:31.288Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":{"text":"A divide error occurs in the Linux kernel when the erase size is set to zero in the block2mtd module. The vulnerability affects Linux kernel versions starting from 3.15. The impact is a divide error, but the exact consequences are unclear.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T14:11:07.309Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-98722"}]}}