In the Linux kernel, the following vulnerability has been resolved:
fbdev: savage: Error out if pixclock equals zero
The userspace program could pass any values to the driver through ioctl() interface. If the driver doesn't check the value of pixclock, it may cause divide-by-zero error.
Although pixclock is checked in savagefb_decode_var(), but it is not checked properly in savagefb_probe(). Fix this by checking whether pixclock is zero in the function savagefb_check_var() before info->var.pixclock is used as the divisor.
This is similar to CVE-2022-3061 in i740fb which was fixed by commit 15cf0b8.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | Apr 3, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Apr 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 3, 2024 |
| Suse | — | Upgrade kernel-azure-vdsoUpgrade kernel-devel-rtUpgrade kernel-rt_debugUpgrade dtb-socionextUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-azure-develUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade kernel-debugUpgrade dtb-xilinxUpgrade dlm-kmp-defaultUpgrade kernel-64kbUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kselftests-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-develUpgrade dtb-armUpgrade kernel-obs-qaUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade dtb-amazonUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-apmUpgrade kernel-default-develUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade kernel-default-manUpgrade dtb-qcomUpgrade cluster-md-kmp-azureUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-sourceUpgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade kernel-syms-rtUpgrade kselftests-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-source-rtUpgrade kernel-develUpgrade dlm-kmp-rtUpgrade kernel-azure-baseUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade kernel-default-optionalUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-defaultUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-source-azureUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade dtb-alteraUpgrade reiserfs-kmp-64kbUpgrade dtb-lgUpgrade dtb-marvellUpgrade dtb-appleUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade cluster-md-kmp-rtUpgrade kernel-azure-extraUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch | May 15, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1063-awsUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-186-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-112-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-raspiUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-oemUpgrade linux-image-awsUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-5.4.0-1131-azureUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-azureUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-5.4.0-1126-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-genericUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.4.0-186-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-intelUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1125-oracleUpgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-raspi2Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-5.4.0-1086-bluefieldUpgrade linux-image-5.4.0-1038-iotUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-gkeopUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-oem-osp1 | Jul 1, 2024 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub