CVE-2024-26777

In the Linux kernel, the following vulnerability has been resolved: fbdev: sis: Error out if pixclock equals zero The userspace program could pass any values to the driver through ioctl() interface. If the driver doesn't check the value of pixclock, it may cause divide-by-zero error. In sisfb_check_var(), var->pixclock is used as a divisor to caculate drate before it is checked against zero. Fix this by checking it at the beginning. This is similar to CVE-2022-3061 in i740fb which was fixed by commit 15cf0b8.

CVSS 3.1

5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.3% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-25)

CWE

CWE-369

Published

2024-04-03

Modified

2026-10-15

Record from

the NVD, synced 2026-10-19

Affected

• debian:debian_linux
• linux:linux_kernel

References

• https://git.kernel.org/stable/c/1d11dd3ea5d039c7da089f309f39c4cd363b924b
• https://git.kernel.org/stable/c/6db07619d173765bd8622d63809cbfe361f04207
• https://git.kernel.org/stable/c/84246c35ca34207114055a87552a1c4289c8fd7e
• https://git.kernel.org/stable/c/99f1abc34a6dde248d2219d64aa493c76bbdd9eb
• https://git.kernel.org/stable/c/cd36da760bd1f78c63c7078407baf01dd724f313

Check your stackJSON