CVE-2024-56369

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-56369
In the Linux kernel, the following vulnerability has been resolved: drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() drm_mode_vrefresh() is trying to avoid divide by zero by checking whether htotal or vtotal are zero. But we may still end up with a div-by-zero of vtotal*htotal*...

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/47c8b6cf1d08f0ad40d7ea7b025442e51b35ee1f Patch
https://git.kernel.org/stable/c/69fbb01e891701e6d04db1ddb5ad49e42c4dd963 Patch
https://git.kernel.org/stable/c/9398332f23fab10c5ec57c168b44e72997d6318e Patch
https://git.kernel.org/stable/c/b39de5a71bac5641d0fda33d1cf5682d82cf1ae5 Patch
https://git.kernel.org/stable/c/e7c7b48a0fc5ed83baae400a1b15e33978c25d7f Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*
History

16 Jan 2025, 15:18

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/modes: Evite dividir por cero con más dificultad en drm_mode_vrefresh() drm_mode_vrefresh() intenta evitar dividir por cero comprobando si htotal o vtotal son cero. Pero aún así podemos terminar con una división por cero de vtotal*htotal*...
References () https://git.kernel.org/stable/c/47c8b6cf1d08f0ad40d7ea7b025442e51b35ee1f - () https://git.kernel.org/stable/c/47c8b6cf1d08f0ad40d7ea7b025442e51b35ee1f - Patch
References () https://git.kernel.org/stable/c/69fbb01e891701e6d04db1ddb5ad49e42c4dd963 - () https://git.kernel.org/stable/c/69fbb01e891701e6d04db1ddb5ad49e42c4dd963 - Patch
References () https://git.kernel.org/stable/c/9398332f23fab10c5ec57c168b44e72997d6318e - () https://git.kernel.org/stable/c/9398332f23fab10c5ec57c168b44e72997d6318e - Patch
References () https://git.kernel.org/stable/c/b39de5a71bac5641d0fda33d1cf5682d82cf1ae5 - () https://git.kernel.org/stable/c/b39de5a71bac5641d0fda33d1cf5682d82cf1ae5 - Patch
References () https://git.kernel.org/stable/c/e7c7b48a0fc5ed83baae400a1b15e33978c25d7f - () https://git.kernel.org/stable/c/e7c7b48a0fc5ed83baae400a1b15e33978c25d7f - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CWE CWE-369
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

11 Jan 2025, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-11 13:15

Updated : 2025-01-16 15:18

NVD link : CVE-2024-56369

Mitre link : CVE-2024-56369

CVE.ORG link : CVE-2024-56369

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-369

Divide By Zero