In the Linux kernel, the following vulnerability has been resolved:
fbmon: prevent division by zero in fbvideomodefrom_videomode()
The expression htotal * vtotal can have a zero value on overflow. It is necessary to prevent division by zero like in fbvarto_videomode().
Found by Linux Verification Center (linuxtesting.org) with Svace.
[ { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1b107d637fed68a787da77a3514ad06e57abd0b4", "signature_version": "v1", "target": { "file": "drivers/video/fbdev/core/fbmon.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "298003127012295076702148380134910208110", "186325154249699694828511118189869814594", "240503230815621294685167597049438026394", "230559621245969392979853494002025566325", "26039343606449144305314869027833087459", "118004490398372580845402913339569112199", "82894487730002911690768271548325437610", "31420102257109590707894092358919291662", "219509759427195019398992345025084756892" ] }, "id": "CVE-2024-35922-0345e274" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@48d6bcfc31751ca2e753d901a2d82f27edf8a029", "signature_version": "v1", "target": { "file": "drivers/video/fbdev/core/fbmon.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "298003127012295076702148380134910208110", "186325154249699694828511118189869814594", "240503230815621294685167597049438026394", "230559621245969392979853494002025566325", "26039343606449144305314869027833087459", "118004490398372580845402913339569112199", "82894487730002911690768271548325437610", "31420102257109590707894092358919291662", "219509759427195019398992345025084756892" ] }, "id": "CVE-2024-35922-0e5b5719" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c2d953276b8b27459baed1277a4fdd5dd9bd4126", "signature_version": "v1", "target": { "file": "drivers/video/fbdev/core/fbmon.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "298003127012295076702148380134910208110", "186325154249699694828511118189869814594", "240503230815621294685167597049438026394", "230559621245969392979853494002025566325", "26039343606449144305314869027833087459", "118004490398372580845402913339569112199", "82894487730002911690768271548325437610", "31420102257109590707894092358919291662", "219509759427195019398992345025084756892" ] }, "id": "CVE-2024-35922-242b9ed9" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@664206ff8b019bcd1e55b10b2eea3add8761b971", "signature_version": "v1", "target": { "file": "drivers/video/fbdev/core/fbmon.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "298003127012295076702148380134910208110", "186325154249699694828511118189869814594", "240503230815621294685167597049438026394", "230559621245969392979853494002025566325", "26039343606449144305314869027833087459", "118004490398372580845402913339569112199", "82894487730002911690768271548325437610", "31420102257109590707894092358919291662", "219509759427195019398992345025084756892" ] }, "id": "CVE-2024-35922-3b328302" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1b107d637fed68a787da77a3514ad06e57abd0b4", "signature_version": "v1", "target": { "function": "fb_videomode_from_videomode", "file": "drivers/video/fbdev/core/fbmon.c" }, "digest": { "function_hash": "301209420768731709043140641355820612075", "length": 1256.0 }, "id": "CVE-2024-35922-61c60160" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@951838fee462aa01fa2a6a91d56f9a495082e7f0", "signature_version": "v1", "target": { "file": "drivers/video/fbdev/core/fbmon.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "298003127012295076702148380134910208110", "186325154249699694828511118189869814594", "240503230815621294685167597049438026394", "230559621245969392979853494002025566325", "26039343606449144305314869027833087459", "118004490398372580845402913339569112199", "82894487730002911690768271548325437610", "31420102257109590707894092358919291662", "219509759427195019398992345025084756892" ] }, "id": "CVE-2024-35922-77bf6fab" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@951838fee462aa01fa2a6a91d56f9a495082e7f0", "signature_version": "v1", "target": { "function": "fb_videomode_from_videomode", "file": "drivers/video/fbdev/core/fbmon.c" }, "digest": { "function_hash": "301209420768731709043140641355820612075", "length": 1256.0 }, "id": "CVE-2024-35922-89766d57" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@72d091b7515e0532ee015e144c906f3bcfdd6270", "signature_version": "v1", "target": { "function": "fb_videomode_from_videomode", "file": "drivers/video/fbdev/core/fbmon.c" }, "digest": { "function_hash": "301209420768731709043140641355820612075", "length": 1256.0 }, "id": "CVE-2024-35922-9e9351fe" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3d4b909704bf2114f64f87363fa22b5ef8ac4a33", "signature_version": "v1", "target": { "function": "fb_videomode_from_videomode", "file": "drivers/video/fbdev/core/fbmon.c" }, "digest": { "function_hash": "301209420768731709043140641355820612075", "length": 1256.0 }, "id": "CVE-2024-35922-a88b4ed6" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@664206ff8b019bcd1e55b10b2eea3add8761b971", "signature_version": "v1", "target": { "function": "fb_videomode_from_videomode", "file": "drivers/video/fbdev/core/fbmon.c" }, "digest": { "function_hash": "301209420768731709043140641355820612075", "length": 1256.0 }, "id": "CVE-2024-35922-aa22a42d" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1fb52bc1de55e9e0bdf71fe078efd4da0889710f", "signature_version": "v1", "target": { "file": "drivers/video/fbdev/core/fbmon.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "298003127012295076702148380134910208110", "186325154249699694828511118189869814594", "240503230815621294685167597049438026394", "230559621245969392979853494002025566325", "26039343606449144305314869027833087459", "118004490398372580845402913339569112199", "82894487730002911690768271548325437610", "31420102257109590707894092358919291662", "219509759427195019398992345025084756892" ] }, "id": "CVE-2024-35922-b33cc470" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@48d6bcfc31751ca2e753d901a2d82f27edf8a029", "signature_version": "v1", "target": { "function": "fb_videomode_from_videomode", "file": "drivers/video/fbdev/core/fbmon.c" }, "digest": { "function_hash": "301209420768731709043140641355820612075", "length": 1256.0 }, "id": "CVE-2024-35922-c22a0692" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3d4b909704bf2114f64f87363fa22b5ef8ac4a33", "signature_version": "v1", "target": { "file": "drivers/video/fbdev/core/fbmon.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "298003127012295076702148380134910208110", "186325154249699694828511118189869814594", "240503230815621294685167597049438026394", "230559621245969392979853494002025566325", "26039343606449144305314869027833087459", "118004490398372580845402913339569112199", "82894487730002911690768271548325437610", "31420102257109590707894092358919291662", "219509759427195019398992345025084756892" ] }, "id": "CVE-2024-35922-c3dd04df" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@72d091b7515e0532ee015e144c906f3bcfdd6270", "signature_version": "v1", "target": { "file": "drivers/video/fbdev/core/fbmon.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "298003127012295076702148380134910208110", "186325154249699694828511118189869814594", "240503230815621294685167597049438026394", "230559621245969392979853494002025566325", "26039343606449144305314869027833087459", "118004490398372580845402913339569112199", "82894487730002911690768271548325437610", "31420102257109590707894092358919291662", "219509759427195019398992345025084756892" ] }, "id": "CVE-2024-35922-cfd48bc4" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c2d953276b8b27459baed1277a4fdd5dd9bd4126", "signature_version": "v1", "target": { "function": "fb_videomode_from_videomode", "file": "drivers/video/fbdev/core/fbmon.c" }, "digest": { "function_hash": "301209420768731709043140641355820612075", "length": 1256.0 }, "id": "CVE-2024-35922-f5d3a40e" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1fb52bc1de55e9e0bdf71fe078efd4da0889710f", "signature_version": "v1", "target": { "function": "fb_videomode_from_videomode", "file": "drivers/video/fbdev/core/fbmon.c" }, "digest": { "function_hash": "301209420768731709043140641355820612075", "length": 1256.0 }, "id": "CVE-2024-35922-fef61e41" } ]