CVE-2026-72414

medium

Description

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pin_duration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycle_time argument to future_base_time(). Very small period values may become zero after the conversion, which can lead to a division by zero in future_base_time(). Round zero pin_duration up to 1 tick so that the smallest unsupported periods use the minimum non-zero hardware duration instead of passing zero to future_base_time().

References

https://git.kernel.org/stable/c/fc62bfd30d30af07356f0f7121c826e1e753582f

https://git.kernel.org/stable/c/aee5836273b07b439fb245fb43930664d8b78518

https://git.kernel.org/stable/c/aaf446099ca497c8d9a8e511fedf5d0e547bf8ec

https://git.kernel.org/stable/c/9952291db7125b8a62bf19800b93dcac81fc70c0

https://git.kernel.org/stable/c/410629528067029096dba7ad7bc49e4a5e92708d

https://git.kernel.org/stable/c/28d13a89a211cc07caeef32069eaa847131b7351

https://git.kernel.org/stable/c/201dcbbfb27f3db85c8cf125a75f3164a83ceb32

https://git.kernel.org/stable/c/09efce96c909dff1a9317ec3714b7ddb4751b7af

Details

Source: Mitre, NVD

Published: 2026-08-15

Updated: 2026-08-17

Risk Information

CVSS v2

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

Severity: High

CVSS v3

Base Score: 5.5

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Medium

EPSS

EPSS: 0.0022