{"answers":{"affected":"","exploited":"There is no known exploitation of CVE-2026-72394 in the wild and no public exploit code.","fix":"Apply the vendor's patch.","what":"CVE-2026-72394 is a denial of service vulnerability in Linux, published on 15 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2026-72394 and fix it if it is affected.\n\nWhat it is: CVE-2026-72394 is a denial of service vulnerability in Linux, published on 15 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2026-72394 in the wild and no public exploit code.\n\nAffected product: Linux. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2026-72394/ (Markdown: https://insights.sbomify.com/CVE-2026-72394/index.md)","id":"CVE-2026-72394","markdown":"https://insights.sbomify.com/CVE-2026-72394/index.md","name":"CVE-2026-72394","record":{"aliases":["BELL-CVE-2026-72394","DEBIAN-CVE-2026-72394","GHSA-3hcm-7xpr-63qg","UBUNTU-CVE-2026-72394"],"analysis":{"component_type":"kernel","fix_type":"patch","impacts":["denial_of_service"],"network_reachable":"adjacent_or_local","non_default_config":false,"product_category":"Linux kernel driver","requires_auth":"none","summary":"A divide-by-zero error in the Aspeed G6 PWM tachometer driver causes a kernel panic when hardware reports a zero tachometer value.","user_interaction":"not_required","vuln_class":"denial_of_service"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"Linux","cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculation against divide-by-zero\n\nSashiko reports:\n\nIn the aspeed-g6-pwm-tacho driver, the aspeed_tach_val_to_rpm() function\ncalculates the fan RPM using the tachometer value. However, it does not\ncheck if the tachometer value is zero before performing the division.\n\nIf the hardware reports a tachometer value of 0 (which can happen due to\nan extremely fast pulse, a stuck edge, or a hardware glitch), the\ncalculated tach_div evaluates to 0. The subsequent call to do_div() with\ntach_div as the divisor triggers a divide-by-zero exception, leading to\na kernel panic.\n\nCheck the divisor against zero to fix the problem.","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"hwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculation against divide-by-zero","id":"CVE-2026-72394","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":null,"products":[],"type":"denial_of_service","year":"2026"},"n_packages":0,"n_references":4,"next":{"headline":"hwmon: (pmbus) Fix passing events to regulator core","id":"CVE-2026-72395"},"packages":[],"prev":{"headline":"eth: fbnic: don't cache shinfo across skb realloc","id":"CVE-2026-72393"},"products":["Linux"],"published":"2026-08-15","related":[],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":"PUBLISHED","updated":"2026-08-17","vendors":["Linux"]},"summary":"A divide-by-zero error in the Aspeed G6 PWM tachometer driver causes a kernel panic when hardware reports a zero tachometer value.","url":"https://insights.sbomify.com/CVE-2026-72394/"}