SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-80610

UNKNOWN · CVSS N/A EPSS 0.15%

Source: NVD + CISA KEV + EPSS · Published 2026-08-28 · Last synced 2026-09-20

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's ENETC driver, specifically in the i.MX94 series, where a divide-by-zero condition can occur when the number of virtual functions (num_vsi) is set to zero. Although this does not lead to a crash on ARM64 systems, it introduces undefined behavior that could compromise cross-platform compatibility. Organizations using Linux on ARM64 with the i.MX94 series should prioritize addressing this issue to ensure system stability and compatibility.

CVE
CVE-2026-80610
Severity
UNKNOWN
CVSS
N/A
EPSS
0.15%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix potential divide-by-zero when num_vsi is zero For i.MX94 series, all the standalone ENETCs do not support SR-IOV, so pf->caps.num_vsi is zero. This leads to a divide-by-zero in enetc4_default_rings_allocation() when distributing rings among PF and VFs. Division by zero is undefined behavior in C. On ARM64, the UDIV/SDIV instructions silently return zero rather than raising an exception, so the issue does not cause a visible crash. However, relying on this behavior is incorrect and poses a cross-platform compatibility risk. Add an explicit check for num_vsi == 0 and return early after the PF's rings have been configured.