CVE-2022-3061
Vulnerability Summary
Timeline
Description
Found Linux Kernel flaw in the i740 driver. The Userspace program could pass any values to the driver through ioctl() interface. The driver doesn't check the value of 'pixclock', so it may cause a divide by zero error.
CVSS Metrics
- v4.0•MEDIUM•Score: 6.7CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
- v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Trends
Current EPSS score: 0.29%• Percentile: 21%
Techniques & Countermeasures
- CWE-369•Divide By Zero
The product divides a value by zero.
Affected Systems
- debian•linux
< 5.10.149-1 | < 5.18.2-1 | < 5.18.2-1 | < 5.18.2-1
- ubuntu•linux
all | < 4.4.0-239.273 | < 4.15.0-201.212 | < 5.4.0-136.153 | < 5.15.0-57.63
- ubuntu•linux-aws
< 4.4.0-1117.123 | < 4.4.0-1155.170 | < 4.15.0-1147.159 | < 5.4.0-1093.101 | < 5.15.0-1027.31
- ubuntu•linux-aws-5.0
all
- ubuntu•linux-aws-5.11
all
- ubuntu•linux-aws-5.13
all
- ubuntu•linux-aws-5.15
< 5.15.0-1027.31~20.04.1
- ubuntu•linux-aws-5.3
all
- ubuntu•linux-aws-5.4
< 5.4.0-1093.102~18.04.2
- ubuntu•linux-aws-5.8
all
- ubuntu•linux-aws-fips
< 4.15.0-2087.93 | all | < 5.4.0-1093.101+fips1
- ubuntu•linux-aws-hwe
< 4.15.0-1147.159~16.04.1
- ubuntu•linux-azure
< 4.15.0-1158.173~14.04.1 | < 4.15.0-1159.174~16.04.1 | all | < 5.4.0-1100.106 | < 5.15.0-1030.37
- ubuntu•linux-azure-4.15
< 4.15.0-1158.173
- ubuntu•linux-azure-5.11
all
- ubuntu•linux-azure-5.13
all
- ubuntu•linux-azure-5.15
< 5.15.0-1030.37~20.04.1
- ubuntu•linux-azure-5.3
all
- ubuntu•linux-azure-5.4
< 5.4.0-1100.106~18.04.1
- ubuntu•linux-azure-5.8
all
- ubuntu•linux-azure-edge
all
- ubuntu•linux-azure-fde
< 5.15.0-1030.37.1
- ubuntu•linux-azure-fips
< 4.15.0-2067.73 | all | < 5.4.0-1100.106+fips1
- ubuntu•linux-bluefield
all | < 5.4.0-1054.60
- ubuntu•linux-dell300x
< 4.15.0-1058.63
- ubuntu•linux-fips
< 4.4.0-1088.95 | all | < 4.15.0-1104.115 | < 5.4.0-1069.78
- ubuntu•linux-gcp
< 4.15.0-1142.158~16.04.1 | all | < 5.4.0-1097.106 | < 5.15.0-1026.33
- ubuntu•linux-gcp-4.15
< 4.15.0-1142.158
- ubuntu•linux-gcp-5.11
all
- ubuntu•linux-gcp-5.13
all
- ubuntu•linux-gcp-5.15
< 5.15.0-1027.34~20.04.1
- ubuntu•linux-gcp-5.3
all
- ubuntu•linux-gcp-5.4
< 5.4.0-1097.106~18.04.1
- ubuntu•linux-gcp-5.8
all
- ubuntu•linux-gcp-fips
< 4.15.0-2052.57 | all | < 5.4.0-1097.106+fips1
- ubuntu•linux-gke
< 5.4.0-1091.98 | < 5.15.0-1024.29
- ubuntu•linux-gke-4.15
all
- ubuntu•linux-gke-5.15
< 5.15.0-1027.32~20.04.1
- ubuntu•linux-gke-5.4
all
- ubuntu•linux-gkeop
< 5.4.0-1061.65 | < 5.15.0-1012.16
- ubuntu•linux-gkeop-5.15
< 5.15.0-1012.16~20.04.1
- ubuntu•linux-gkeop-5.4
all
- ubuntu•linux-hwe
< 4.15.0-201.212~16.04.1 | all
- ubuntu•linux-hwe-5.11
all
- ubuntu•linux-hwe-5.13
all
- ubuntu•linux-hwe-5.15
< 5.15.0-57.63~20.04.1
- ubuntu•linux-hwe-5.4
< 5.4.0-136.153~18.04.1
- ubuntu•linux-hwe-5.8
all
- ubuntu•linux-hwe-edge
all | all
- ubuntu•linux-ibm
< 5.4.0-1041.46 | < 5.15.0-1022.25
Showing first 50 affected entries in server-rendered view.
References (19)
- https://git.kernel.org/pub/scm/linux/kernel/git/deller/linux-fbdev.git/commit/?id=15cf0b82271b1823fb02ab8c377badba614d95d5
- https://www.debian.org/security/2022/dsa-5257
- https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html
- https://ubuntu.com/security/CVE-2022-3061
- https://git.kernel.org/linus/15cf0b82271b1823fb02ab8c377badba614d95d5
- https://ubuntu.com/security/notices/USN-5790-1
- https://ubuntu.com/security/notices/USN-5791-1
- https://ubuntu.com/security/notices/USN-5792-1
- https://ubuntu.com/security/notices/USN-5791-2
- https://ubuntu.com/security/notices/USN-5792-2
- https://ubuntu.com/security/notices/USN-5791-3
- https://ubuntu.com/security/notices/USN-5815-1
- https://ubuntu.com/security/notices/USN-5877-1
- https://ubuntu.com/security/notices/USN-5976-1
- https://ubuntu.com/security/notices/USN-6001-1
- https://ubuntu.com/security/notices/USN-6013-1
- https://ubuntu.com/security/notices/USN-6014-1
- https://www.cve.org/CVERecord?id=CVE-2022-3061
- https://security-tracker.debian.org/tracker/CVE-2022-3061