What’s Vulnerable › Vulnerabilities

CVE-2026-72414: net: dsa: sja1105: round up PTP perout pin duration

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-15 · updated 2026-08-17

Description

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pin_duration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycle_time argument to future_base_time(). Very small period values may become zero after the conversion, which can lead to a division by zero in future_base_time(). Round zero pin_duration up to 1 tick so that the smallest unsupported periods use the minimum non-zero hardware duration instead of passing zero to future_base_time().

Affected products

• Linux kernel: 5.7 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/09efce96c909dff1a9317ec3714b7ddb4751b7af
• https://git.kernel.org/stable/c/201dcbbfb27f3db85c8cf125a75f3164a83ceb32
• https://git.kernel.org/stable/c/28d13a89a211cc07caeef32069eaa847131b7351
• https://git.kernel.org/stable/c/410629528067029096dba7ad7bc49e4a5e92708d
• https://git.kernel.org/stable/c/9952291db7125b8a62bf19800b93dcac81fc70c0
• https://git.kernel.org/stable/c/aaf446099ca497c8d9a8e511fedf5d0e547bf8ec
• https://git.kernel.org/stable/c/aee5836273b07b439fb245fb43930664d8b78518
• https://git.kernel.org/stable/c/fc62bfd30d30af07356f0f7121c826e1e753582f

Get alerted when CVE-2026-72414 or the next vulnerability affects your stack