This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-62431 →

DEBIAN-CVE-2026-62431

The logic to handle periodic Viridian STIMERs performs a division with an unchecked user-controlled divisor value, that can be set to zero to cause a...

Original description

The description as published by the source.

The logic to handle periodic Viridian STIMERs performs a division with an unchecked user-controlled divisor value, that can be set to zero to cause a #DE fault.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 xen

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.7-0+deb12u1"}]}]

Debian:13 xen

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.3+127-gc42374a105-0+deb13u1"}]}]

Debian:14 xen

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.3+127-gc42374a105-1"}]}]

References

advisory security-tracker.debian.org