In the Linux kernel, the following vulnerability has been resolved:
fbdev: sis: Error out if pixclock equals zero
The userspace program could pass any values to the driver through ioctl() interface. If the driver doesn't check the value of pixclock, it may cause divide-by-zero error.
In sisfb_check_var(), var->pixclock is used as a divisor to caculate drate before it is checked against zero. Fix this by checking it at the beginning.
This is similar to CVE-2022-3061 in i740fb which was fixed by commit 15cf0b8.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | Apr 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 3, 2024 |
| Suse | — | Upgrade kernel-rtUpgrade kernel-azure-develUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade dtb-amazonUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-manUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-symsUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-rtUpgrade dtb-qcomUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade dtb-amlogicUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-rtUpgrade dtb-apmUpgrade kernel-rt_debugUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade dtb-marvellUpgrade kernel-64kb-optionalUpgrade kernel-docsUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade dtb-exynosUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-vdsoUpgrade dtb-armUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-baseUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-mediatekUpgrade kernel-debug-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-rt-develUpgrade dtb-freescaleUpgrade kernel-rt-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-defaultUpgrade kernel-source-rtUpgrade dtb-renesasUpgrade dtb-amdUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-64kb-develUpgrade kselftests-kmp-azureUpgrade kernel-develUpgrade ocfs2-kmp-azureUpgrade dtb-rockchipUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-hisiliconUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kernel-default-baseUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade kernel-rt-optionalUpgrade kernel-default-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-lgUpgrade kernel-rt-livepatchUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade dtb-xilinxUpgrade dtb-broadcomUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-debugUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-appleUpgrade kernel-azureUpgrade kernel-64kb-extra | May 15, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1169-gcpUpgrade linux-image-5.4.0-1131-azureUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-5.4.0-1125-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.4.0-1140-kvmUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-4.15.0-1159-kvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-1176-awsUpgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1038-iotUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-hweUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-raspi2Upgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-genericUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-azureUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-intelUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-113-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-4.15.0-1138-oracleUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1184-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-232-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-4.4.0-262-genericUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-4.15.0-232-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.4.0-1086-bluefieldUpgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-nvidiaUpgrade linux-image-4.4.0-1139-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-262-lowlatencyUpgrade linux-image-4.4.0-1177-awsUpgrade linux-image-5.4.0-1126-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-186-genericUpgrade linux-image-gkeopUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-186-lowlatencyUpgrade linux-image-oem-osp1 | Jul 1, 2024 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 3, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub