{"id":"CVE-2026-72238","summary":"x86/boot: Validate console=uart8250 baud rate to fix early boot hang","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nx86/boot: Validate console=uart8250 baud rate to fix early boot hang\n\nWhen the baud rate is empty, 0, invalid, or overflows to 0 when stored\nas an int, the system will hang during early boot because of a division\nby zero in early_serial_init().\n\nFall back to DEFAULT_BAUD when the resulting baud rate is 0 to prevent\nan early system hang.","modified":"2026-08-18T03:31:20.429888099Z","published":"2026-08-15T05:54:27.424Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72238.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/24fbed0a2a45f5f379ef2b53bd2abe58be1142ad"},{"type":"WEB","url":"https://git.kernel.org/stable/c/4dad7e870c7e5178f71b5e1e4f67934b9e8cc207"},{"type":"WEB","url":"https://git.kernel.org/stable/c/9a77a7639dfdc3eca417cd37620ce64da79c80c4"},{"type":"WEB","url":"https://git.kernel.org/stable/c/b4d05032e9af7137eab8f3af2855073f896ca843"},{"type":"WEB","url":"https://git.kernel.org/stable/c/c1a276a731d02cbb728d0530f327a68728f2d8b0"},{"type":"WEB","url":"https://git.kernel.org/stable/c/efa96a22613b86e05cd81229ce0be411c1a4a79a"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f7c67c97b37c11f2a95c204092fb8159f2779e8f"},{"type":"WEB","url":"https://git.kernel.org/stable/c/ffa0aa5b625fe0bed7463ac613f8b06676ff4542"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72238.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72238"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"ce0aa5dd20e44372f9617dd67c984f41fcdbed88"},{"fixed":"c1a276a731d02cbb728d0530f327a68728f2d8b0"},{"fixed":"24fbed0a2a45f5f379ef2b53bd2abe58be1142ad"},{"fixed":"efa96a22613b86e05cd81229ce0be411c1a4a79a"},{"fixed":"9a77a7639dfdc3eca417cd37620ce64da79c80c4"},{"fixed":"b4d05032e9af7137eab8f3af2855073f896ca843"},{"fixed":"f7c67c97b37c11f2a95c204092fb8159f2779e8f"},{"fixed":"4dad7e870c7e5178f71b5e1e4f67934b9e8cc207"},{"fixed":"ffa0aa5b625fe0bed7463ac613f8b06676ff4542"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72238.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.6.36"},{"fixed":"5.10.261"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.212"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.178"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.145"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.97"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.40"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.1.5"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72238.json"}}],"schema_version":"1.9.0"}