Skip to main content
VulnerabilityPublished Updated

CVE-2026-46161: Linux kernel · md/raid10: fix divide-by-zero in setup_geo() with zero far_copies

Affects Linux kernelSource CVE Database V5

0
Compare

Not known to be exploited · fixed in f9ddb621b2325eb69c95692958daf2bab4dea2c4 : update Linux kernel when convenient.

Data as of 6 Nov 2026, 16:34 UTC

Severity
Unrated

Rated by Threat Radar · No CVSS score from NVD or the CNA

Thin evidence

One scorer or none
CISA SSVC
Exploitation
No evidence of active exploitation and no public proof of concept
Automatable
Attackers cannot reliably automate steps 1–4 of the kill chain
Technical impact
Limited control over the software or limited information exposure

CISA SSVC assessment, 2026-11-06.

Patch
Available – fixed in f9ddb621b2325eb69c95692958daf2bab4dea2c4, c716ab3034f84f8a6c226814247b8c5ac9f95da1, 913d556e4bd1b56ed822815655b82c7bb54edc51 +5

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 28 May 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 6 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 475901aff15841fb0a81e7546517407779a9b061, < f9ddb621b2325eb69c95692958daf2bab4dea2c4
Fixed in
  • f9ddb621b2325eb69c95692958daf2bab4dea2c4
LinuxLinuxAffected
  • ≥ 475901aff15841fb0a81e7546517407779a9b061, < c716ab3034f84f8a6c226814247b8c5ac9f95da1
Fixed in
  • c716ab3034f84f8a6c226814247b8c5ac9f95da1
LinuxLinuxAffected
  • ≥ 475901aff15841fb0a81e7546517407779a9b061, < 913d556e4bd1b56ed822815655b82c7bb54edc51
Fixed in
  • 913d556e4bd1b56ed822815655b82c7bb54edc51
LinuxLinuxAffected
  • ≥ 475901aff15841fb0a81e7546517407779a9b061, < 553e32adfa1a96b217651139a3f8c3b92b9984ac
Fixed in
  • 553e32adfa1a96b217651139a3f8c3b92b9984ac
LinuxLinuxAffected
  • ≥ 475901aff15841fb0a81e7546517407779a9b061, < 9d8e03b9a2b1e8ce5c198bf3a409a629f4d02cda
Fixed in
  • 9d8e03b9a2b1e8ce5c198bf3a409a629f4d02cda
LinuxLinuxAffected
  • ≥ 475901aff15841fb0a81e7546517407779a9b061, < 9aa6d860b0930e2f72795665c42c44252a558a0c
Fixed in
  • 9aa6d860b0930e2f72795665c42c44252a558a0c

Description

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix divide-by-zero in setup_geo() with zero far_copies setup_geo() extracts near_copies (nc) and far_copies (fc) from the user-provided layout parameter without checking for zero. When fc=0 with the "improved" far set layout selected, 'geo->far_set_size = disks / fc' triggers a divide-by-zero. Validate nc and fc immediately after extraction, returning -1 if either is zero.

References

Community reviews

Loading reviews…