In the Linux kernel, the following vulnerability has been resolved:
fbdev: sis: Error out if pixclock equals zero
The userspace program could pass any values to the driver through ioctl() interface. If the driver doesn't check the value of pixclock, it may cause divide-by-zero error.
In sisfb_check_var(), var->pixclock is used as a divisor to caculate drate before it is checked against zero. Fix this by checking it at the beginning.
This is similar to CVE-2022-3061 in i740fb which was fixed by commit 15cf0b8.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | Apr 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 3, 2024 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade dtb-hisiliconUpgrade kselftests-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade dtb-freescaleUpgrade dtb-renesasUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-rtUpgrade dtb-appleUpgrade dtb-sprdUpgrade kernel-rt-optionalUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debugUpgrade kselftests-kmp-64kbUpgrade kernel-devel-rtUpgrade dlm-kmp-64kbUpgrade kernel-default-vdsoUpgrade dlm-kmp-rtUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-broadcomUpgrade dtb-xilinxUpgrade dtb-amdUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-develUpgrade kselftests-kmp-azureUpgrade dtb-caviumUpgrade kernel-debug-develUpgrade ocfs2-kmp-64kbUpgrade dtb-lgUpgrade kernel-default-optionalUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade kernel-rt-develUpgrade dtb-alteraUpgrade kernel-rt-extraUpgrade kernel-develUpgrade kernel-obs-buildUpgrade dtb-armUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade cluster-md-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade dtb-socionextUpgrade kernel-obs-qaUpgrade dtb-amlogicUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade kernel-azure-vdsoUpgrade kernel-azure-baseUpgrade dtb-apmUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade dtb-marvellUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade dtb-amazonUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade dtb-exynosUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-rtUpgrade dtb-mediatek | May 15, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1038-iotUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-4.15.0-1169-gcpUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-5.4.0-1125-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-hweUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1131-azureUpgrade linux-image-4.15.0-1176-awsUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-4.4.0-1140-kvmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-4.15.0-1159-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-4.15.0-1184-azureUpgrade linux-image-gkeop-5.4Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-intelUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-1139-awsUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1063-awsUpgrade linux-image-gkeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-nvidiaUpgrade linux-image-raspiUpgrade linux-image-ibmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-4.15.0-232-genericUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.15.0-1138-oracleUpgrade linux-image-4.15.0-232-lowlatencyUpgrade linux-image-4.4.0-262-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-azureUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1086-bluefieldUpgrade linux-image-4.4.0-1177-awsUpgrade linux-image-oem-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-oemUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-262-lowlatencyUpgrade linux-image-5.4.0-1126-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-186-genericUpgrade linux-image-5.4.0-186-lowlatencyUpgrade linux-image-azure-lts-20.04 | Jul 1, 2024 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub