CVE-2026-31770

hwmon: (occ) Fix division by zero in occ_show_power_1()

published May 1, 2026

CVSS
—
EPSS
0%
Percentile
5.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (occ) Fix division by zero in occ_show_power_1()

In occ_show_power_1() case 1, the accumulator is divided by

update_tag without checking for zero. If no samples have been

collected yet (e.g. during early boot when the sensor block is

included but hasn't been updated), update_tag is zero, causing

a kernel divide-by-zero crash.

The 2019 fix in commit 211186cae14d ("hwmon: (occ) Fix division by

zero issue") only addressed occ_get_powr_avg() used by

occ_show_power_2() and occ_show_power_a0(). This separate code

path in occ_show_power_1() was missed.

Fix this by reusing the existing occ_get_powr_avg() helper, which

already handles the zero-sample case and uses mul_u64_u32_div()

to multiply before dividing for better precision. Move the helper

above occ_show_power_1() so it is visible at the call site.

[groeck: Fix alignment problems reported by checkpatch]

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.1th percentile
Published
2026-05-01T14:14Z
EPSS history
Timeline
  • 01 MAY 14:14Z
    hwmon: (occ) Fix division by zero in occ_show_power_1()
    cvelistv5