CVE-2024-57950: drm/amd/display: Initialize denominator defaults to 1
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Initialize denominator defaults to 1
[WHAT & HOW] Variables, used as denominators and maybe not assigned to other values, should be initialized to non-zero to avoid DIVIDEBYZERO, as reported by Coverity.
(cherry picked from commit e2c4c6c10542ccfe4a0830bb6c9fd5b177b7bbb7)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.12-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Upgrade
Upgrade
ubuntu/linux-azure-6.11to a version that resolves this vulnerability.Fixed in 6.11.0-1013.13~24.04.1 - Upgrade
Upgrade
ubuntu/linux-gcp-6.11to a version that resolves this vulnerability.Fixed in 6.11.0-1013.13~24.04.1 - Upgrade
Upgrade
ubuntu/linux-hwe-6.11to a version that resolves this vulnerability.Fixed in 6.11.0-24.24~24.04.1 - Upgrade
Upgrade
ubuntu/linux-lowlatency-hwe-6.11to a version that resolves this vulnerability.Fixed in 6.11.0-1012.13~24.04.1 - Upgrade
Upgrade
ubuntu/linux-nvidia-6.11to a version that resolves this vulnerability.Fixed in 6.11.0-1007.7 - Upgrade
Upgrade
ubuntu/linux-oem-6.11to a version that resolves this vulnerability.Fixed in 6.11.0-1020.20 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch e2c4c6c10542ccfe4a0830bb6c9fd5b177b7bbb7
Event History
Frequently Asked Questions
What is the severity of CVE-2024-57950?
CVE-2024-57950 is classified as a high severity vulnerability due to the potential for a divide-by-zero error in the Linux kernel.
How do I fix CVE-2024-57950?
To fix CVE-2024-57950, update your Linux kernel to the latest version where this vulnerability has been addressed.
What are the potential impacts of CVE-2024-57950?
The potential impacts of CVE-2024-57950 include system crashes and unstable behavior due to unexpected divide-by-zero errors.
Which versions of the Linux kernel are affected by CVE-2024-57950?
CVE-2024-57950 affects specific versions of the Linux kernel where the vulnerability exists, especially prior to the fix being applied.
Is CVE-2024-57950 being actively exploited?
As of now, there have been no confirmed reports of active exploitation of CVE-2024-57950 in the wild.