CVE-2022-3061: Divide by Zero
Found Linux Kernel flaw in the i740 driver. The Userspace program could pass any values to the driver through ioctl() interface. The driver doesn't check the value of 'pixclock', so it may cause a divide by zero error.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2022-3061?
CVE-2022-3061 has a moderate severity level due to the potential for a divide by zero error.
How do I fix CVE-2022-3061?
To resolve CVE-2022-3061, upgrade to a secure version of the Linux kernel such as 5.10.223-1, 5.10.226-1, or later.
Which Linux kernel versions are affected by CVE-2022-3061?
CVE-2022-3061 affects various versions of the Linux Kernel, including 5.18-rc5 and older stable versions.
Can CVE-2022-3061 be exploited remotely?
CVE-2022-3061 requires local user access to exploit, thus it is not a remote vulnerability.
What component of the Linux kernel is impacted by CVE-2022-3061?
CVE-2022-3061 impacts the i740 driver in the Linux kernel.