CVE-2022-50102: video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock()
Vulnerability summary
CVE-2022-50102 is a medium (CVSS 5.5) Divide By Zero vulnerability in linux. EPSS estimates a 0.19% chance of exploitation in the next 30 days, higher than 9.1% of scored vulnerabilities.
Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 7 · Related 7Timeline
- 18-06-2025PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() Since the user can control the arguments of the ioctl() from the user space, under special arguments that may result in a divide-by-zero bug in: drivers/video/fbdev/arkfb.c:784: ark_set_pixclock(info, (hdiv * info->var.pixclock) / hmul); with hdiv=1, pixclock=1 and hmul=2 you end up with (1*1)/2 = (int) 0. and then in: drivers/video/fbdev/arkfb.c:504: rv = dac_set_freq(par->dac, 0, 1000000000 / pixclock); we'll get a division-by-zero. The following log can reveal it: divide error: 0000 [#1] PREEMPT SMP KASAN PTI RIP: 0010:ark_set_pixclock drivers/video/fbdev/arkfb.c:504 [inline] RIP: 0010:arkfb_set_par+0x10fc/0x24c0 drivers/video/fbdev/arkfb.c:784 Call Trace: fb_set_var+0x604/0xeb0 drivers/video/fbdev/core/fbmem.c:1034 do_fb_ioctl+0x234/0x670 drivers/video/fbdev/core/fbmem.c:1110 fb_ioctl+0xdd/0x130 drivers/video/fbdev/core/fbmem.c:1189 Fix this by checking the argument of ark_set_pixclock() first.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.19%
Chance of exploitation in the next 30 days
Percentile
9%
Versus all other CVEs
30-day change
Increase +0.01 pp
From 0.19% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu111 products
- linuxAll versions (No fix recorded) | < 4.15.0-197.208 | < 5.4.0-132.148 | < 5.15.0-53.59
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 4.15.0-1143.155 | < 5.4.0-1089.97 | < 5.15.0-1023.27
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 681e14730c73cc2c71af282c001de6bc71c22f00, < 76b3f0a0b56e53a960a14624a0f48b3d94b5e7e7 | ≥ 681e14730c73cc2c71af282c001de6bc71c22f00, < b9a66f23612b84617e04412169e155a4b92f632d | ≥ 681e14730c73cc2c71af282c001de6bc71c22f00, < a249e1b89ca25e1c34bdf96154e3f6224a91a9af | ≥ 681e14730c73cc2c71af282c001de6bc71c22f00, < 0288fa799e273b08839037499d704dc7bdc13e9a | ≥ 681e14730c73cc2c71af282c001de6bc71c22f00, < 236c1502520b7b08955467ec2e50b3232e34f1f9 | ≥ 681e14730c73cc2c71af282c001de6bc71c22f00, < 9ebc5031958c1f3a2795e4533b4091d77c738d14 | ≥ 681e14730c73cc2c71af282c001de6bc71c22f00, < 15661642511b2b192077684a89f42a8d95d54286 | ≥ 681e14730c73cc2c71af282c001de6bc71c22f00, < 2f1c4523f7a3aaabe7e53d3ebd378292947e95c8 | 2.6.22
- linux_kernel≥ 2.6.22, < 4.14.291 | ≥ 4.15, < 4.19.256 | ≥ 4.20, < 5.4.211 | ≥ 5.5, < 5.10.137 | ≥ 5.11, < 5.15.61 | ≥ 5.16, < 5.18.18 | ≥ 5.19, < 5.19.2
Debian1 product
- linux< 6.0.2-1
3 vendors · 114 products
