CVE-2024-39475: linux Divide By Zero
Vulnerability summary
CVE-2024-39475 is a medium (CVSS 5.5) Divide By Zero vulnerability in linux. EPSS estimates a 0.23% chance of exploitation in the next 30 days, higher than 12.8% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 33 · Related 30Timeline
- 05-07-2024PublishedVulnerability first disclosed.
- 23-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: fbdev: savage: Handle err return when savagefb_check_var failed The commit 04e5eac8f3ab("fbdev: savage: Error out if pixclock equals zero") checks the value of pixclock to avoid divide-by-zero error. However the function savagefb_probe doesn't handle the error return of savagefb_check_var. When pixclock is 0, it will cause divide-by-zero error.
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.23%
Chance of exploitation in the next 30 days
Percentile
13%
Versus all other CVEs
30-day change
0.00 pp
From 0.23% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu112 products
- linux< 5.4.0-192.212 | < 5.15.0-121.131 | < 6.8.0-44.44
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.4.0-1130.140 | < 5.15.0-1069.75 | < 6.8.0-1015.16
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 224453de8505aede1890f007be973925a3edf6a1, < be754cbd77eaf2932408a4e18532e4945274a5c7 | ≥ 84dce0f6a4cc5b7bfd7242ef9290db8ac1dd77ff, < 86435f39c18967cdd937d7a49ba539cdea7fb547 | ≥ 512ee6d6041e007ef5bf200c6e388e172a2c5b24, < 32f92b0078ebf79dbe4827288e0acb50d89d3d5b | ≥ 8c54acf33e5adaad6374bf3ec1e3aff0591cc8e1, < 4b2c67e30b4e1d2ae19dba8b8e8f3b5fd3cf8089 | ≥ 070398d32c5f3ab0e890374904ad94551c76aec4, < edaa57480b876e8203b51df7c3d14a51ea6b09e3 | ≥ bc3c2e58d73b28b9a8789fca84778ee165a72d13, < b8385ff814ca4cb7e63789841e6ec2a14c73e1e8 | ≥ 04e5eac8f3ab2ff52fa191c187a46d4fdbc1e288, < 5f446859bfa46df0ffb34149499f48a2c2d8cd95 | ≥ 04e5eac8f3ab2ff52fa191c187a46d4fdbc1e288, < 6ad959b6703e2c4c5d7af03b4cfd5ff608036339 | a9ca4e80d23474f90841251f4ac0d941fa337a01 | ≥ 4.19.308, < 4.19.316 | ≥ 5.4.270, < 5.4.278 | ≥ 5.10.211, < 5.10.219 | ≥ 5.15.150, < 5.15.161 | ≥ 6.1.80, < 6.1.94 | ≥ 6.6.19, < 6.6.34 | ≥ 6.7.7, < 6.8 | 6.8
- linux_kernel≥ 4.19, < 4.19.316 | ≥ 5.4, < 5.4.278 | ≥ 5.10, < 5.10.219 | ≥ 5.15, < 5.15.161 | ≥ 6.1, < 6.1.94 | ≥ 6.6, < 6.6.34 | ≥ 6.9, < 6.9.5
Debian1 product
- linux< 6.1.94-1 | < 6.9.7-1
3 vendors · 115 products
