CVE-2022-3061 json
Found Linux Kernel flaw in the i740 driver.
published 2022-09-01 4 y ago modified 2026-06-17 4 mo ago also EUVD-2022-42493
- cvss
- 5.5
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.3%
- EPSS 0.3% chance of exploitation in 30 days, percentile 21%
- public exploits
- 0
- none known
Summary
Found Linux Kernel flaw in the i740 driver. The Userspace program could pass any values to the driver through ioctl() interface. The driver doesn't check the value of 'pixclock', so it may cause a divide by zero error.
Patch / fix
- linux Debian 14, Debian 13, Debian 12 5.18.2-1
debian advisories DEBIAN-CVE-2022-3061
- linux Ubuntu 18.04 LTS 4.15.0-201.212
- linux Ubuntu 20.04 LTS 5.4.0-136.153
- linux Ubuntu 22.04 LTS 5.15.0-57.63
- linux-aws Ubuntu 18.04 LTS 4.15.0-1147.159
- linux-aws Ubuntu 20.04 LTS 5.4.0-1093.101
- linux-aws Ubuntu 22.04 LTS 5.15.0-1027.31
- linux-gcp Ubuntu 20.04 LTS 5.4.0-1097.106
- linux-gcp Ubuntu 22.04 LTS 5.15.0-1026.33
ubuntu advisories UBUNTU-CVE-2022-3061
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2022-3061 updated cvss 6.2
kernel: fbdev: i740fb: divide-by-zero in drivers/video/fbdev/i740fb.c could lead to DoS
-
Red Hat Enterprise Linux 6 perf, kernel, python-perf, kernel-kdump, kernel-firmware, kernel-bootwrapper, +1 more Red Hat Enterprise Linux 7 perf, kernel, bpftool, python-perf, kernel-kdump, kernel-tools, +3 more Red Hat Enterprise Linux 8 perf, kernel, bpftool, kernel-core, kernel-tools, python3-perf, +17 more Red Hat Enterprise Linux 9 rv, perf, rtla, kernel, bpftool, libperf, +82 morenot affected: vulnerable code not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
0.29% chance of exploitation in the next 30 days, higher than 21% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Affected products
- n/a Kernel
Classification
- Weakness
-
- CWE-369 Divide By Zero
- Technology feeds
References
-
git.kernel.org
/pub/scm/linux/kernel/git/deller/linux-fbdev.git/commit/?id=15cf0b82271b1823fb02ab8c377badba614d95d5
mailing-list, patch, vendor-advisory
-
debian.org
/security/2022/dsa-5257
vendor-advisory, third-party-advisory
-
lists.debian.org
/debian-lts-announce/2022/11/msg00001.html
mailing-list, third-party-advisory
Sources
- CVE List CVE-2022-3061
- NVD CVE-2022-3061
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.