vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-72238

x86/boot: Validate console=uart8250 baud rate to fix early boot hang

N/A
Published: August 15, 2026 at 05:54 AM UTC
Updated: August 17, 2026 at 06:18 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: x86/boot: Validate console=uart8250 baud rate to fix early boot hang When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the system will hang during early boot because of a division by zero in early_serial_init(). Fall back to DEFAULT_BAUD when the resulting baud rate is 0 to prevent an early system hang.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
2.6.36 ≤ v < 5.10.2612.6.36 ≤ v < 5.15.2122.6.36 ≤ v < 6.1.1782.6.36 ≤ v < 6.12.972.6.36 ≤ v < 6.18.402.6.36 ≤ v < 6.6.1452.6.36 ≤ v < 7.1.52.6.36 ≤ v < 7.22.6.36ce0aa5dd20e44372f9617dd67c984f41fcdbed88
Vendor states this is fixed in 24fbed0a2a45f5f379ef2b53bd2abe58be1142ad (fixed)
Vendor states this is fixed in 4dad7e870c7e5178f71b5e1e4f67934b9e8cc207 (fixed)
Vendor states this is fixed in 9a77a7639dfdc3eca417cd37620ce64da79c80c4 (fixed)
Vendor states this is fixed in b4d05032e9af7137eab8f3af2855073f896ca843 (fixed)
Vendor states this is fixed in c1a276a731d02cbb728d0530f327a68728f2d8b0 (fixed)
Vendor states this is fixed in efa96a22613b86e05cd81229ce0be411c1a4a79a (fixed)
Vendor states this is fixed in f7c67c97b37c11f2a95c204092fb8159f2779e8f (fixed)
Vendor states this is fixed in ffa0aa5b625fe0bed7463ac613f8b06676ff4542 (fixed)
Vendor states this is fixed in 2.6.36 (unaffected)
Vendor states this is fixed in 5.10.261 (unaffected)
Vendor states this is fixed in 5.15.212 (unaffected)
Vendor states this is fixed in 6.1.178 (unaffected)
Vendor states this is fixed in 6.12.97 (unaffected)
Vendor states this is fixed in 6.18.40 (unaffected)
Vendor states this is fixed in 6.6.145 (unaffected)
Vendor states this is fixed in 7.1.5 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (8)

Source: cverecord
https://git.kernel.org/stable/c/c1a276a731d02cbb728d0530f327a68728f2d8b0
Source: cverecord
https://git.kernel.org/stable/c/24fbed0a2a45f5f379ef2b53bd2abe58be1142ad
Source: cverecord
https://git.kernel.org/stable/c/efa96a22613b86e05cd81229ce0be411c1a4a79a
Source: cverecord
https://git.kernel.org/stable/c/9a77a7639dfdc3eca417cd37620ce64da79c80c4
Source: cverecord
https://git.kernel.org/stable/c/b4d05032e9af7137eab8f3af2855073f896ca843
Source: cverecord
https://git.kernel.org/stable/c/f7c67c97b37c11f2a95c204092fb8159f2779e8f
Source: cverecord
https://git.kernel.org/stable/c/4dad7e870c7e5178f71b5e1e4f67934b9e8cc207
Source: cverecord
https://git.kernel.org/stable/c/ffa0aa5b625fe0bed7463ac613f8b06676ff4542

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card