Division by Zero Vulnerability in Linux Kernel Affecting Davinci I2C Driver

CVE-2026-64236

What is CVE-2026-64236?

A vulnerability in the Linux kernel's Davinci I2C driver arises when the 'clock-frequency' property is omitted from the device tree. The driver reverts to a default bus frequency defined in kilohertz, leading to erroneous integer division which eventually results in a kernel panic due to division by zero. To address this issue, the default bus frequency value has been redefined in hertz, ensuring compatibility with the expected device tree configuration and preventing potential system instability during the probe sequence.

References