CVE-2024-26777Divide By Zero in Kernel

CWE-369Divide By Zero37 documents7 sources
Severity
5.5MEDIUMNVD
OSV8.8OSV7.8OSV7.0OSV6.5
EPSS
0.0%
top 99.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedApr 3
Latest updateAug 14

Description

In the Linux kernel, the following vulnerability has been resolved: fbdev: sis: Error out if pixclock equals zero The userspace program could pass any values to the driver through ioctl() interface. If the driver doesn't check the value of pixclock, it may cause divide-by-zero error. In sisfb_check_var(), var->pixclock is used as a divisor to caculate drate before it is checked against zero. Fix this by checking it at the beginning. This is similar to CVE-2022-3061 in i740fb which was fixed

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

NVDlinux/linux_kernel4.205.4.270+7
Debianlinux/linux_kernel< 5.10.216-1+3
Ubuntulinux/linux_kernel< 5.4.0-186.206+3
debiandebian/linux< linux 6.1.82-1 (bookworm)

Also affects: Debian Linux 10.0

Patches

🔴Vulnerability Details

18
OSV
linux-azure, linux-azure-4.15 vulnerabilities2025-01-09
OSV
linux, linux-lts-xenial vulnerabilities2025-01-06
OSV
linux-aws, linux-kvm vulnerabilities2025-01-06
OSV
linux, linux-aws, linux-aws-hwe, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities2025-01-06
OSV
linux-raspi vulnerabilities2024-07-26

📋Vendor Advisories

18
CISA ICS
Siemens SINEC OS2025-08-14
Ubuntu
Linux kernel (Azure) vulnerabilities2025-01-09
Ubuntu
Linux kernel vulnerabilities2025-01-06
Ubuntu
Linux kernel vulnerabilities2025-01-06
Ubuntu
Linux kernel vulnerabilities2025-01-06