In the Linux kernel, the following vulnerability has been resolved:
fbdev: sis: Error out if pixclock equals zero
The userspace program could pass any values to the driver through ioctl() interface. If the driver doesn't check the value of pixclock, it may cause divide-by-zero error.
In sisfb_check_var(), var->pixclock is used as a divisor to caculate drate before it is checked against zero. Fix this by checking it at the beginning.
This is similar to CVE-2022-3061 in i740fb which was fixed by commit 15cf0b8.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | Apr 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 3, 2024 |
| Suse | — | Upgrade dtb-alteraUpgrade dtb-nvidiaUpgrade kernel-rt-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade kernel-rt-develUpgrade dtb-sprdUpgrade dlm-kmp-64kbUpgrade dtb-amdUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-debugUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade dtb-renesasUpgrade kernel-debug-vdsoUpgrade dtb-freescaleUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-source-rtUpgrade dtb-appleUpgrade dtb-hisiliconUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade kernel-develUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade reiserfs-kmp-azureUpgrade kernel-defaultUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-optionalUpgrade reiserfs-kmp-64kbUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade dtb-lgUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-broadcomUpgrade kernel-devel-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-rt-livepatchUpgrade dtb-rockchipUpgrade kernel-64kb-develUpgrade kernel-azure-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-symsUpgrade kernel-rt-vdsoUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-azure-livepatch-develUpgrade dtb-amazonUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-default-base-rebuildUpgrade kernel-docsUpgrade kernel-rtUpgrade kernel-rt_debugUpgrade kernel-obs-qaUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-docs-htmlUpgrade dtb-exynosUpgrade dtb-mediatekUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade dtb-apmUpgrade kernel-azure-vdsoUpgrade kernel-azure-baseUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade kernel-sourceUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade kernel-64kb-livepatch-develUpgrade dtb-marvellUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade dtb-armUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-source-azure | May 15, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-1159-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1125-oracleUpgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-bluefieldUpgrade linux-image-oracleUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-1131-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-4.4.0-1140-kvmUpgrade linux-image-kvmUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-aws-hweUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1038-iotUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-112-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1176-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-4.15.0-1169-gcpUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-4.4.0-1139-awsUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-4.4.0-262-genericUpgrade linux-image-5.4.0-186-lowlatencyUpgrade linux-image-oemUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1086-bluefieldUpgrade linux-image-nvidiaUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-4.15.0-232-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1126-awsUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1063-awsUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-4.15.0-1184-azureUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-186-genericUpgrade linux-image-4.15.0-1138-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-4.15.0-232-lowlatencyUpgrade linux-image-4.4.0-262-lowlatencyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-intelUpgrade linux-image-generic-lts-xenialUpgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-intel-iotgUpgrade linux-image-azureUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-4.4.0-1177-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-gkeop-5.4 | Jul 1, 2024 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub