CVE-2026-64236CWE-369

CVE-2026-64236

Medium · published July 24, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
4.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

i2c: davinci: fix division by zero on missing clock-frequency

When the 'clock-frequency' property is missing from the device tree,

the driver falls back to DAVINCI_I2C_DEFAULT_BUS_FREQ. However, this

macro was defined in kHz (100), whereas the device tree property is

expected in Hz.

The probe function divided the fallback value by 1000, causing

integer truncation that resulted in dev->bus_freq = 0. This triggered

a deterministic division-by-zero kernel panic when calculating clock

dividers later in the probe sequence.

Fix this by redefining DAVINCI_I2C_DEFAULT_BUS_FREQ in Hz (100000)

to match the expected device tree property unit, allowing the existing

division logic to work correctly for both cases.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00160 · 4.8th percentile
Weakness
CWE-369 · Divide By Zero
Published
2026-07-24T20:16Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 6.14, < 6.18.356.18.35
linux/linux_kernel≥ 6.19, < 7.0.127.0.12
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (3)
EPSS history
Timeline
  • 24 JUL 15:27Z
    i2c: davinci: fix division by zero on missing clock-frequency
    cvelistv5