CVE - CVE-2022-49978

CVE-ID
CVE-2022-49978	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: fbdev: fb_pm2fb: Avoid potential divide by zero error In `do_fb_ioctl()` of fbmem.c, if cmd is FBIOPUT_VSCREENINFO, var will be copied from user, then go through `fb_set_var()` and `info->fbops->fb_check_var()` which could may be `pm2fb_check_var()`. Along the path, `var->pixclock` won't be modified. This function checks whether reciprocal of `var->pixclock` is too high. If `var->pixclock` is zero, there will be a divide by zero error. So, it is necessary to check whether denominator is zero to avoid crash. As this bug is found by Syzkaller, logs are listed below. divide error in pm2fb_check_var Call Trace: <TASK> fb_set_var+0x367/0xeb0 drivers/video/fbdev/core/fbmem.c:1015 do_fb_ioctl+0x234/0x670 drivers/video/fbdev/core/fbmem.c:1110 fb_ioctl+0xdd/0x130 drivers/video/fbdev/core/fbmem.c:1189
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0f1174f4972ea9fad6becf8881d71adca8e9ca91 URL:https://git.kernel.org/stable/c/0f1174f4972ea9fad6becf8881d71adca8e9ca91 MISC:https://git.kernel.org/stable/c/19f953e7435644b81332dd632ba1b2d80b1e37af URL:https://git.kernel.org/stable/c/19f953e7435644b81332dd632ba1b2d80b1e37af MISC:https://git.kernel.org/stable/c/34c3dea1189525cd533071ed5c176fc4ea8d982b URL:https://git.kernel.org/stable/c/34c3dea1189525cd533071ed5c176fc4ea8d982b MISC:https://git.kernel.org/stable/c/3ec326a6a0d4667585ca595f438c7293e5ced7c4 URL:https://git.kernel.org/stable/c/3ec326a6a0d4667585ca595f438c7293e5ced7c4 MISC:https://git.kernel.org/stable/c/7d9591b32a9092fc6391a316b56e8016c6181c3d URL:https://git.kernel.org/stable/c/7d9591b32a9092fc6391a316b56e8016c6181c3d MISC:https://git.kernel.org/stable/c/7f88cdfea8d7f4dbaf423d808241403b2bb945e4 URL:https://git.kernel.org/stable/c/7f88cdfea8d7f4dbaf423d808241403b2bb945e4 MISC:https://git.kernel.org/stable/c/8fc778ee2fb2853f7a3531fa7273349640d8e4e9 URL:https://git.kernel.org/stable/c/8fc778ee2fb2853f7a3531fa7273349640d8e4e9 MISC:https://git.kernel.org/stable/c/cb4bb011a683532841344ca7f281b5e04389b4f8 URL:https://git.kernel.org/stable/c/cb4bb011a683532841344ca7f281b5e04389b4f8
Assigning CNA
kernel.org
Date Record Created
20250618	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250618)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)