CVE-2026-68356
In the Linux kernel, the following vulnerability has been resolved: watchdog: airoha: Prevent division by zero when clock frequency is zero clk_get_rate() can return 0 when the clock provider is not properly configured or the clock is unmanaged. The driver uses wdt_freq as a divisor directly in airoha_wdt_probe() to compute max_timeout and in airoha_wdt_get_timeleft() to compute the remaining time, which results in a division by zero. Add a check for wdt_freq == 0 in probe and return -EINVAL with dev_err_probe() to prevent the division by zero and provide a diagnostic message.
Affected versions
Linux kernel versions
6.13
and later are affected. Fixed in
6.18.42,
7.1.6,
7.2
and their respective stable series.
References
3 totalFrequently asked questions
-
What is CVE-2026-68356?
CVE-2026-68356 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.13 onward and has been patched in 6.18.42, 7.1.6 and 7.2. CVE-2026-68356 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-68356?
Yes. CVE-2026-68356 has been patched. Fixed versions include 6.18.42, 7.1.6 and 7.2. If you are running Linux kernel 6.13 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-68356 actively exploited?
No. CVE-2026-68356 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.