What’s Vulnerable › Vulnerabilities

CVE-2026-46161: md/raid10: fix divide-by-zero in setup_geo() with zero far_copies

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-28 · updated 2026-10-15
• Weakness: CWE-369

Description

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix divide-by-zero in setup_geo() with zero far_copies setup_geo() extracts near_copies (nc) and far_copies (fc) from the user-provided layout parameter without checking for zero. When fc=0 with the "improved" far set layout selected, 'geo->far_set_size = disks / fc' triggers a divide-by-zero. Validate nc and fc immediately after extraction, returning -1 if either is zero.

Affected products

• Linux kernel: from 3.9.1 before 5.10.258; from 5.11 before 5.15.209; from 5.16 before 6.1.175; from 6.2 before 6.6.140; from 6.7 before 6.12.88; from 6.13 before 6.18.30 — fixed in 5.10.258, 5.15.209, 6.1.175, 6.12.88, 6.18.30, 6.6.140

How to fix

Upgrade to a fixed version: Linux kernel 5.10.258, 5.15.209, 6.1.175, 6.12.88. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0b43a70394ce492274e67463326be03e0a9897c5
• https://git.kernel.org/stable/c/4af2e558e6fdfb972c61350653fd55d1f62b60a5
• https://git.kernel.org/stable/c/553e32adfa1a96b217651139a3f8c3b92b9984ac
• https://git.kernel.org/stable/c/913d556e4bd1b56ed822815655b82c7bb54edc51
• https://git.kernel.org/stable/c/9aa6d860b0930e2f72795665c42c44252a558a0c
• https://git.kernel.org/stable/c/9d8e03b9a2b1e8ce5c198bf3a409a629f4d02cda
• https://git.kernel.org/stable/c/c716ab3034f84f8a6c226814247b8c5ac9f95da1
• https://git.kernel.org/stable/c/f9ddb621b2325eb69c95692958daf2bab4dea2c4
• https://cert-portal.siemens.com/productcert/html/ssa-784472.html

Get alerted when CVE-2026-46161 or the next vulnerability affects your stack