CVE-2026-46161
In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix divide-by-zero in setup_geo() with zero far_copies setup_geo() extracts near_copies (nc) and far_copies (fc) from the user-provided layout parameter without checking for zero. When fc=0 with the "improved" far set layout selected, 'geo->far_set_size = disks / fc' triggers a divide-by-zero. Validate nc and fc immediately after extraction, returning -1 if either is zero.
Affected versions
Linux kernel versions
3.9
and later are affected. Fixed in
5.10.258,
5.15.209,
6.1.175,
6.6.140,
6.12.88,
6.18.30,
7.0.7,
7.1-rc2
and their respective stable series.
References
The following references provide additional information about CVE-2026-46161 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.
-
PatchKernel patch commithttps://git.kernel.org/stable/c/0b43a70394ce492274e67463326be03e0a9897c5
-
PatchKernel patch commithttps://git.kernel.org/stable/c/4af2e558e6fdfb972c61350653fd55d1f62b60a5
-
PatchKernel patch commithttps://git.kernel.org/stable/c/553e32adfa1a96b217651139a3f8c3b92b9984ac
Frequently asked questions
-
What is CVE-2026-46161?
CVE-2026-46161 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 3.9 onward and has been patched in 5.10.258, 5.15.209, 6.1.175 and others. CVE-2026-46161 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-46161?
Yes — CVE-2026-46161 has been patched. Fixed versions include 5.10.258, 5.15.209, 6.1.175 and others. If you are running Linux kernel 3.9 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-46161 actively exploited?
No — CVE-2026-46161 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.