CVE-2022-3061

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-09-01 · updated 2026-06-17
Weakness: CWE-369

Description

Found Linux Kernel flaw in the i740 driver. The Userspace program could pass any values to the driver through ioctl() interface. The driver doesn't check the value of 'pixclock', so it may cause a divide by zero error.

Affected products

Debian Linux: 10.0, 11.0
Linux kernel: 5.18-rc5

References

https://git.kernel.org/pub/scm/linux/kernel/git/deller/linux-fbdev.git/commit/?id=15cf0b82271b1823fb02ab8c377badba614d95d5
https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html
https://www.debian.org/security/2022/dsa-5257
https://git.kernel.org/pub/scm/linux/kernel/git/deller/linux-fbdev.git/commit/?id=15cf0b82271b1823fb02ab8c377badba614d95d5
https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html
https://www.debian.org/security/2022/dsa-5257

Get alerted when CVE-2022-3061 or the next vulnerability affects your stack