CVE-2026-98390

Source
https://cve.org/CVERecord?id=CVE-2026-98390
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98390.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-98390
Downstream
BELL (1)
DEBIAN (1)
SUSE (4)
UBUNTU (1)
Related
Published
2026-10-14T13:25:54Z
Modified
2026-11-13T04:07:30Z
Summary
x86/amd_node: Avoid divide by zero on virtualized systems
Details

In the Linux kernel, the following vulnerability has been resolved:

x86/amd_node: Avoid divide by zero on virtualized systems

On a virtualized system, the number of nodes does not have a relationship to the number of roots. A Xen PVH dom0 can calculate roots_per_node as 0, which crashes with a divide by zero in:

if (count++ % roots_per_node)

because the underlying topology code on Xen ends up making num_nodes 2 and num_roots 1 and the integer division result is 0.

The issue is seen with Xen, but it could affect other systems.

Set roots_per_node to 1 in this case. Print a firmware bug when this is performed for non-virtualized systems.

[ bp: Massage commit message. ]

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98390.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0a4b61d9c2e496b5f0a10e29e355a1465c8738bb
Fixed
9273a90465d58b82aca4bea71451ef6bee084928
Fixed
94e984d8858a3228952b02f84e66610961098cc2
Fixed
72bd92bd8190d7869ecb462649ca40f297822a33
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c4ad899a33198ab6335732c769835d035e66894a

Affected versions

v6.*
v6.17.10
v6.17.11
v6.17.12
v6.17.13
v6.17.8
v6.17.9

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98390.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.17.8
Fixed
6.18
Type
ECOSYSTEM
Events
Introduced
6.18.0
Fixed
6.18.53
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.7

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98390.json"