CVE-2026-72238: x86/boot: Validate console=uart8250 baud rate to fix early boot hang
In the Linux kernel, the following vulnerability has been resolved:
x86/boot: Validate console=uart8250 baud rate to fix early boot hang
When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the system will hang during early boot because of a division by zero in earlyserialinit().
Fall back to DEFAULTBAUD when the resulting baud rate is 0 to prevent an early system hang.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72238?
CVE-2026-72238 has a risk rating of 17, indicating a potentially significant impact on system performance.
How do I fix CVE-2026-72238?
To fix CVE-2026-72238, ensure that the baud rate for the console=uart8250 is valid and properly configured to prevent a division by zero during early boot.
What causes the issue in CVE-2026-72238?
The issue in CVE-2026-72238 is caused by an empty, invalid, or overflowed baud rate leading to a division by zero during early system boot.
Which system components are affected by CVE-2026-72238?
CVE-2026-72238 affects the Linux kernel's x86 boot process with specific regard to the uart8250 console configuration.
When was CVE-2026-72238 published?
CVE-2026-72238 was published on August 15, 2026.