Medium severity5.5NVD Advisory· Published Apr 24, 2026· Updated Jun 1, 2026

CVE-2026-31603

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: sm750fb: fix division by zero in ps_to_hz()

ps_to_hz() is called from hw_sm750_crtc_set_mode() without validating that pixclock is non-zero. A zero pixclock passed via FBIOPUT_VSCREENINFO causes a division by zero.

Fix by rejecting zero pixclock in lynxfb_ops_check_var(), consistent with other framebuffer drivers.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Linux/Kernel2 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=4.1,<6.6.136
- (no CPE)
osv-coords10 versions
pkg:apk/chainguard/linux-aws-6.12 pkg:apk/chainguard/linux-aws-6.18 pkg:apk/chainguard/linux-azure-6.18 pkg:apk/chainguard/linux-gcp-6.18 pkg:apk/chainguard/linux-qemu-6.12 pkg:apk/chainguard/linux-qemu-6.18 pkg:apk/chainguard/linux-qemu-6.18-bootc-boot-installed pkg:apk/chainguard/linux-vmware-6.12 pkg:apk/chainguard/linux-vmware-6.18 pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Tumbleweed
< 6.12.85-r0+ 9 more
- (no CPE)range: < 6.12.85-r0
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 6.12.85-r0
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 6.12.85-r0
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 7.0.3-1.1

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000

CVE-2026-31603

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions