CVE-2026-46161
Published May 28, 2026
Modified Jun 1, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix divide-by-zero in setup_geo() with zero far_copies setup_geo() extracts near_copies (nc) and far_copies (fc) from the user-provided layout parameter without checking for zero. When fc=0 with the "improved" far set layout selected, 'geo->far_set_size = disks / fc' triggers a divide-by-zero. Validate nc and fc immediately after extraction, returning -1 if either is zero.
Is your site exposed to CVE-2026-46161?
Run a free security scan — no signup, results in seconds.
EPSS — Exploit Prediction
0.0013
Probability of exploitation
0.03%
Percentile rank
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
References
Other References
https://git.kernel.org/stable/c/0b43a70394ce492274e67463326be03e0a9897c5
https://git.kernel.org/stable/c/4af2e558e6fdfb972c61350653fd55d1f62b60a5
https://git.kernel.org/stable/c/553e32adfa1a96b217651139a3f8c3b92b9984ac
https://git.kernel.org/stable/c/913d556e4bd1b56ed822815655b82c7bb54edc51
https://git.kernel.org/stable/c/9aa6d860b0930e2f72795665c42c44252a558a0c
https://git.kernel.org/stable/c/9d8e03b9a2b1e8ce5c198bf3a409a629f4d02cda
https://git.kernel.org/stable/c/c716ab3034f84f8a6c226814247b8c5ac9f95da1
https://git.kernel.org/stable/c/f9ddb621b2325eb69c95692958daf2bab4dea2c4
Frequently Asked Questions
What is CVE-2026-46161? +
In the Linux kernel, the following vulnerability has been resolved:
md/raid10: fix divide-by-zero in setup_geo() with zero far_copies
setup_geo() extracts near_copies (nc) and far_copies (fc) from the
user-provided layout parameter without checking for zero. When fc=0
with the "improved" far set layout selected, 'geo->far_set_size =
disks / fc' triggers a divide-by-zero.
Validate nc and fc immediately after extraction, returning -1 if
either is zero.
How do I check if I'm vulnerable to CVE-2026-46161? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.