In the Linux kernel, the following vulnerability has been resolved:
fbdev: savage: Error out if pixclock equals zero
The userspace program could pass any values to the driver through ioctl() interface. If the driver doesn't check the value of pixclock, it may cause divide-by-zero error.
Although pixclock is checked in savagefb_decode_var(), but it is not checked properly in savagefb_probe(). Fix this by checking whether pixclock is zero in the function savagefb_check_var() before info->var.pixclock is used as the divisor.
This is similar to CVE-2022-3061 in i740fb which was fixed by commit 15cf0b8.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | Apr 3, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Apr 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 3, 2024 |
| Suse | — | Upgrade dtb-appleUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade dtb-marvellUpgrade kernel-default-vdsoUpgrade dtb-lgUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-rt_debug-develUpgrade dtb-freescaleUpgrade kselftests-kmp-64kbUpgrade dtb-exynosUpgrade kernel-default-baseUpgrade dtb-allwinnerUpgrade kernel-rt-vdsoUpgrade kernel-azure-extraUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-rt-optionalUpgrade dtb-rockchipUpgrade dlm-kmp-64kbUpgrade kernel-azure-baseUpgrade dtb-nvidiaUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade kernel-rt-livepatchUpgrade dtb-broadcomUpgrade kernel-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade dtb-renesasUpgrade kernel-source-azureUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kernel-source-rtUpgrade kernel-default-extraUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade kernel-debug-develUpgrade kernel-devel-rtUpgrade kernel-default-manUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade dtb-socionextUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade dlm-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-64kb-livepatch-develUpgrade dtb-mediatekUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-rtUpgrade kernel-macrosUpgrade reiserfs-kmp-azureUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-amlogicUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade gfs2-kmp-rtUpgrade dtb-armUpgrade dtb-apmUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade dtb-qcom | May 15, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1131-azureUpgrade linux-image-awsUpgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-bluefieldUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-186-genericUpgrade linux-image-ibmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oemUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-oracleUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-nvidiaUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1038-iotUpgrade linux-image-generic-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.4.0-1086-bluefieldUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1125-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-gkeopUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1066-azureUpgrade linux-image-virtualUpgrade linux-image-oem-20.04cUpgrade linux-image-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-intelUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-186-lowlatencyUpgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1126-awsUpgrade linux-image-5.15.0-113-generic | Jul 1, 2024 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub