Overview
About vulnerability
In the Linux kernel, the following vulnerability has been resolved:
fbdev: savage: Error out if pixclock equals zero
The userspace program could pass any values to the driver through ioctl() interface. If the driver doesn’t check the value of pixclock, it may cause divide-by-zero error.
Although pixclock is checked in savagefb_decode_var(), but it is not checked properly in savagefb_probe(). Fix this by checking whether pixclock is zero in the function savagefb_check_var() before info->var.pixclock is used as the divisor.
This is similar to CVE-2022-3061 in i740fb which was fixed by commit 15cf0b8.
Details
- Affected product:
- AlmaLinux 9.2 ESU , Amazon Linux 2 ELS , CentOS 6 ELS , CentOS 7 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 6 ELS , CloudLinux 7 ELS , Debian 10 ELS , Oracle Linux 6 ELS , Oracle Linux 7 ELS , RHEL 7 ELS , TuxCare 9.6 ESU , Ubuntu 16.04 ELS , Ubuntu 18.04 ELS , Ubuntu 20.04 ELS
- Affected packages:
- kernel @ 3.10.0 (+19 more)
Fixes
KernelCare state
Live-patch status from KernelCare for each operating system.
| Operating system | Status | Covered kernels |
|---|---|---|
| Debian 10 | Will Not Fix | — |
| Debian 10 cloud | Will Not Fix | — |
| Debian 11 | Released |
28 kernels
|
| Debian 11 cloud | Released |
8 kernels
|
| Debian 12 | Planned | — |
| Oracle Linux 6 UEK 4 | Planned | — |
| Oracle Linux 7 UEK 4 | Planned | — |
| Proxmox VE 6 | Released |
41 kernels
|
| Proxmox VE 7 5.15 | Released |
44 kernels
|
| Ubuntu 18.04 AWS Focal | Released |
56 kernels
|
| Ubuntu 18.04 Azure Focal | Released |
58 kernels
|
| Ubuntu 18.04 HWE Focal | Released |
69 kernels
|
| Ubuntu 18.04 HWE GCP | Released |
15 kernels
|
| Ubuntu 20.04 | Released |
108 kernels
|
| Ubuntu 20.04 AWS | Released |
91 kernels
|
| Ubuntu 20.04 Azure | Released |
82 kernels
|
| Ubuntu 20.04 GCP | Released |
14 kernels
|
| Ubuntu 20.04 HWE AWS | Released |
39 kernels
|
| Ubuntu 20.04 HWE Azure | Released |
23 kernels
|
| Ubuntu 22.04 | Released |
52 kernels
|
| Ubuntu 22.04 AWS | Released |
46 kernels
|
| Ubuntu 22.04 Azure | Released |
43 kernels
|