Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: fbdev: sis: Error out if pixclock equals zero The userspace program could pass any values to the driver through ioctl() interface. If the driver doesn't check the value of pixclock, it may cause divide-by-zero error. In sisfb_check_var(), var->pixclock is used as a divisor to caculate drate before it is checked against zero. Fix this by checking it at the beginning. This is similar to CVE-2022-3061 in i740fb which was fixed by commit 15cf0b8.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | < 4.19.308 |
| Debian | Debian Linux | 10.0 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/1d11dd3ea5d039c7da089f309f39c4cd363b924bPatch
- https://git.kernel.org/stable/c/6db07619d173765bd8622d63809cbfe361f04207Patch
- https://git.kernel.org/stable/c/84246c35ca34207114055a87552a1c4289c8fd7ePatch
- https://git.kernel.org/stable/c/99f1abc34a6dde248d2219d64aa493c76bbdd9ebPatch
- https://git.kernel.org/stable/c/cd36da760bd1f78c63c7078407baf01dd724f313Patch
- https://git.kernel.org/stable/c/df6e2088c6f4cad539cf67cba2d6764461e798d1Patch
- https://git.kernel.org/stable/c/e421946be7d9bf545147bea8419ef8239cb7ca52Patch
- https://git.kernel.org/stable/c/f329523f6a65c3bbce913ad35473d83a319d5d99Patch
- https://git.kernel.org/stable/c/1d11dd3ea5d039c7da089f309f39c4cd363b924bPatch
- https://git.kernel.org/stable/c/6db07619d173765bd8622d63809cbfe361f04207Patch
- https://git.kernel.org/stable/c/84246c35ca34207114055a87552a1c4289c8fd7ePatch
- https://git.kernel.org/stable/c/99f1abc34a6dde248d2219d64aa493c76bbdd9ebPatch
- https://git.kernel.org/stable/c/cd36da760bd1f78c63c7078407baf01dd724f313Patch
- https://git.kernel.org/stable/c/df6e2088c6f4cad539cf67cba2d6764461e798d1Patch
- https://git.kernel.org/stable/c/e421946be7d9bf545147bea8419ef8239cb7ca52Patch
FAQ
What is CVE-2024-26777?
CVE-2024-26777 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: fbdev: sis: Error out if pixclock equals zero The userspace program could pass any values to the driver through ioctl() interface....
How severe is CVE-2024-26777?
CVE-2024-26777 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-26777?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Debian Debian Linux.