NetSight
IP …
medium5.5

CVE-2024-39475

In the Linux kernel, the following vulnerability has been resolved: fbdev: savage: Handle err return when savagefb_check_var failed The commit 04e5eac8f3ab("fb…

Impact

In the Linux kernel, the following vulnerability has been resolved: fbdev: savage: Handle err return when savagefb_check_var failed The commit 04e5eac8f3ab("fbdev: savage: Error out if pixclock equals zero") checks the value of pixclock to avoid divide-by-zero error. However the function savagefb_probe doesn't handle the error return of savagefb_check_var. When pixclock is 0, it will cause divide-by-zero error.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.19 before 4.19.316
from 5.4 before 5.4.278
from 5.10 before 5.10.219
from 5.15 before 5.15.161
from 6.1 before 6.1.94
from 6.6 before 6.6.34

Weakness classification

CWE-369

References