What’s Vulnerable › Vulnerabilities

CVE-2024-49899: drm/amd/display: Initialize denominators' default to 1

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-10-21 · updated 2026-06-17
• Weakness: CWE-369

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Initialize denominators' default to 1 [WHAT & HOW] Variables used as denominators and maybe not assigned to other values, should not be 0. Change their default to 1 so they are never 0. This fixes 10 DIVIDE_BY_ZERO issues reported by Coverity.

Affected products

• Linux kernel: before 6.11.3 — fixed in 6.11.3

How to fix

Upgrade to a fixed version: Linux kernel 6.11.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/7f8e93b862aba08d540f1e9e03e0ceb4d0cfd5fb
• https://git.kernel.org/stable/c/9be768f08b16f020da376538b08463ac3a2ce8cd
• https://git.kernel.org/stable/c/9f35cec5e4b9759b38c663d18eae4eaf30f36527
• https://git.kernel.org/stable/c/b995c0a6de6c74656a0c39cd57a0626351b13e3c
• https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html

Get alerted when CVE-2024-49899 or the next vulnerability affects your stack