In the Linux kernel, the following vulnerability has been resolved:
fbdev: savage: Error out if pixclock equals zero
The userspace program could pass any values to the driver through ioctl() interface. If the driver doesn't check the value of pixclock, it may cause divide-by-zero error.
Although pixclock is checked in savagefb_decode_var(), but it is not checked properly in savagefb_probe(). Fix this by checking whether pixclock is zero in the function savagefb_check_var() before info->var.pixclock is used as the divisor.
This is similar to CVE-2022-3061 in i740fb which was fixed by commit 15cf0b8.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | Apr 3, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Apr 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 3, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade dtb-nvidiaUpgrade kernel-rt-livepatchUpgrade kernel-rt-optionalUpgrade kernel-develUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-azure-baseUpgrade ocfs2-kmp-64kbUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-default-baseUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-renesasUpgrade dtb-exynosUpgrade kernel-azure-extraUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-debug-vdsoUpgrade dtb-appleUpgrade dtb-freescaleUpgrade ocfs2-kmp-azureUpgrade dtb-sprdUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-default-base-rebuildUpgrade dtb-allwinnerUpgrade dtb-lgUpgrade dtb-marvellUpgrade kernel-azureUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-default-manUpgrade kernel-64kb-develUpgrade kernel-rt_debugUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade dtb-amazonUpgrade dtb-armUpgrade dtb-apmUpgrade kernel-default-extraUpgrade dtb-qcomUpgrade kselftests-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-64kbUpgrade dlm-kmp-defaultUpgrade kernel-azure-develUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rtUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-socionextUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade dtb-xilinxUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-mediatekUpgrade kernel-azure-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-rtUpgrade ocfs2-kmp-rt | May 15, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1131-azureUpgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-raspiUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-186-genericUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-oem-20.04cUpgrade linux-image-kvmUpgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1038-iotUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-intelUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-virtualUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-186-lowlatencyUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-azureUpgrade linux-image-5.4.0-1125-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1086-bluefieldUpgrade linux-image-5.4.0-1126-awsUpgrade linux-image-lowlatency-hwe-18.04 | Jul 1, 2024 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub