Description
In the Linux kernel, the following vulnerability has been resolved: fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() In fb_find_mode_cvt(), iff mode->refresh somehow happens to be 0x80000000, cvt.f_refresh will become 0 when multiplying it by 2 due to overflow. It's then passed to fb_cvt_hperiod(), where it's used as a divider -- division by 0 will result in kernel oops. Add a sanity check for cvt.f_refresh to avoid such overflow... Found by Linux Verification Center (linuxtesting.org) with the Svace static analysis tool.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
96fe6a2109db29cd15b90a093c16e6cb4b19371a to < 9027ce4c037b566b658b8939a76326b7125e3627affected96fe6a2109db29cd15b90a093c16e6cb4b19371a to < 610f247f2772e4f92b63442125a1b7ade79898d8affected96fe6a2109db29cd15b90a093c16e6cb4b19371a to < 2d63433e8eaa3c91b2948190e395bc67009db0d9affected96fe6a2109db29cd15b90a093c16e6cb4b19371a to < 54947530663edcbaaee1314c01fdd8c72861b124affected96fe6a2109db29cd15b90a093c16e6cb4b19371a to < ab91647acdf43b984824776559a452212eaeb21aaffected96fe6a2109db29cd15b90a093c16e6cb4b19371a to < b235393b9f43ff86a38ca2bde6372312ea215dc5affected96fe6a2109db29cd15b90a093c16e6cb4b19371a to < 53784073cbad18f75583fd3da9ffdfc4d1f05405affected96fe6a2109db29cd15b90a093c16e6cb4b19371a to < 3f6dae09fc8c306eb70fdfef70726e1f154e173aaffected
Linux Linux
Default version status: affected
2.6.14affected0 to < 2.6.14unaffected5.4.295 to ≤ 5.4.*unaffected5.10.239 to ≤ 5.10.*unaffected5.15.186 to ≤ 5.15.*unaffected6.1.142 to ≤ 6.1.*unaffected6.6.94 to ≤ 6.6.*unaffected6.12.34 to ≤ 6.12.*unaffected6.15.3 to ≤ 6.15.*unaffected6.16 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/9027ce4c037b566b658b8939a76326b7125e3627 ↗
- https://git.kernel.org/stable/c/610f247f2772e4f92b63442125a1b7ade79898d8 ↗
- https://git.kernel.org/stable/c/2d63433e8eaa3c91b2948190e395bc67009db0d9 ↗
- https://git.kernel.org/stable/c/54947530663edcbaaee1314c01fdd8c72861b124 ↗
- https://git.kernel.org/stable/c/ab91647acdf43b984824776559a452212eaeb21a ↗
- https://git.kernel.org/stable/c/b235393b9f43ff86a38ca2bde6372312ea215dc5 ↗
- https://git.kernel.org/stable/c/53784073cbad18f75583fd3da9ffdfc4d1f05405 ↗
- https://git.kernel.org/stable/c/3f6dae09fc8c306eb70fdfef70726e1f154e173a ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html ↗