CVE-2024-49892

MEDIUM EPSS 17.0%
Published Oct 21, 20241y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Oct 21, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Initialize get_bytes_per_element's default to 1 Variables, used as denominators and maybe not assigned to other values, should not be 0. bytes_per_element_y & bytes_per_element_c are initialized by get_bytes_per_element() which should never return 0. This fixes 10 DIVIDE_BY_ZERO issues reported by Coverity.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
17.0% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-369

Affected Products 6

VendorProductVersionRange
linuxlinux_kernel* <5.10.227
linuxlinux_kernel*≥5.11  –  <5.15.168
linuxlinux_kernel*≥5.16  –  <6.1.113
linuxlinux_kernel*≥6.2  –  <6.6.55
linuxlinux_kernel*≥6.7  –  <6.10.14
linuxlinux_kernel*≥6.11  –  <6.11.3

References 12

  • cert-portal.siemens.com https://cert-portal.siemens.com/productcert/html/ssa-265688.html
  • cert-portal.siemens.com https://cert-portal.siemens.com/productcert/html/ssa-355557.html
  • git.kernel.org https://git.kernel.org/stable/c/1f9f8186e239222f1c8d3dd73bf3bc6ae86c5e76
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/3334ab72cbba55a632f24579cd47c4a4e5e69cda
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/4067f4fa0423a89fb19a30b57231b384d77d2610
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8f0abb39c16e719129de10596b3ae3363fa178b4
  • git.kernel.org https://git.kernel.org/stable/c/a23d6029e730f8a151b1a34afb169baac1274583
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bc00d211da4ffad5314a2043b50bdc8ff8a33724
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c7630935d9a4986e8c0ed91658a781b7a77d73f7
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f921335123f6620c3dce5c96fbb95f18524a021c
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/1f9f8186e239222f1c8d3dd73bf3bc6ae86c5e76
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/3334ab72cbba55a632f24579cd47c4a4e5e69cda
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/4067f4fa0423a89fb19a30b57231b384d77d2610
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a23d6029e730f8a151b1a34afb169baac1274583
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bc00d211da4ffad5314a2043b50bdc8ff8a33724
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c7630935d9a4986e8c0ed91658a781b7a77d73f7
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f921335123f6620c3dce5c96fbb95f18524a021c
    Patch