CVE-2022-3061: Divide by Zero
First published: Thu Sep 01 2022(Updated: )
Found Linux Kernel flaw in the i740 driver. The Userspace program could pass any values to the driver through ioctl() interface. The driver doesn't check the value of 'pixclock', so it may cause a divide by zero error.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | =5.18-rc5 | |
| Debian Linux | =10.0 | |
| Debian Linux | =11.0 | |
| debian/linux | 5.10.223-1 5.10.234-1 6.1.129-1 6.1.128-1 6.12.21-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/pub/scm/linux/kernel/git/deller/linux-fbdev.git/commit/?id=15cf0b82271b1823fb02ab8c377badba614d95d5
- https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html
- https://www.debian.org/security/2022/dsa-5257
- https://launchpad.net/bugs/cve/CVE-2022-3061
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3061
- https://nvd.nist.gov/vuln/detail/CVE-2022-3061
- https://security-tracker.debian.org/tracker/CVE-2022-3061
- https://ubuntu.com/security/CVE-2022-3061
- https://git.kernel.org/linus/15cf0b82271b1823fb02ab8c377badba614d95d5
Frequently Asked Questions
What is the severity of CVE-2022-3061?
CVE-2022-3061 has a moderate severity level due to the potential for a divide by zero error.
How do I fix CVE-2022-3061?
To resolve CVE-2022-3061, upgrade to a secure version of the Linux kernel such as 5.10.223-1, 5.10.226-1, or later.
Which Linux kernel versions are affected by CVE-2022-3061?
CVE-2022-3061 affects various versions of the Linux Kernel, including 5.18-rc5 and older stable versions.
Can CVE-2022-3061 be exploited remotely?
CVE-2022-3061 requires local user access to exploit, thus it is not a remote vulnerability.
What component of the Linux kernel is impacted by CVE-2022-3061?
CVE-2022-3061 impacts the i740 driver in the Linux kernel.
- agent/type
- collector/launchpad-cve
- source/Launchpad
- agent/first-publish-date
- agent/severity
- agent/weakness
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/remedy
- agent/trending
- agent/source
- agent/author
- collector/usn-cve
- source/Ubuntu
- agent/description
- agent/event
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/softwarecombine
- agent/tags
- collector/security-tracker-debian
- source/Debian
- vendor/linux
- canonical/linux kernel
- version/linux kernel/5.18-rc5
- vendor/debian
- canonical/debian linux
- version/debian linux/10.0
- version/debian linux/11.0
- package-manager/debian