What’s Vulnerable › Vulnerabilities

CVE-2024-56369: drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-01-11 · updated 2026-06-17
• Weakness: CWE-369

Description

In the Linux kernel, the following vulnerability has been resolved: drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() drm_mode_vrefresh() is trying to avoid divide by zero by checking whether htotal or vtotal are zero. But we may still end up with a div-by-zero of vtotal*htotal*...

Affected products

• Linux kernel: before 5.15.176; from 5.16 before 6.1.122; from 6.2 before 6.6.68; from 6.7 before 6.12.7; 6.13-rc1, 6.13-rc2, 6.13-rc3 — fixed in 5.15.176, 6.1.122, 6.12.7, 6.6.68

How to fix

Upgrade to a fixed version: Linux kernel 5.15.176, 6.1.122, 6.12.7, 6.6.68. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/47c8b6cf1d08f0ad40d7ea7b025442e51b35ee1f
• https://git.kernel.org/stable/c/69fbb01e891701e6d04db1ddb5ad49e42c4dd963
• https://git.kernel.org/stable/c/9398332f23fab10c5ec57c168b44e72997d6318e
• https://git.kernel.org/stable/c/b39de5a71bac5641d0fda33d1cf5682d82cf1ae5
• https://git.kernel.org/stable/c/e7c7b48a0fc5ed83baae400a1b15e33978c25d7f
• https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html

Get alerted when CVE-2024-56369 or the next vulnerability affects your stack