PT-2022-6194 · Linux+3 · Linux Kernel+3

Zheyu Ma · Published 2022-04-11 · Updated 2025-02-27 · CVE-2022-3061

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description The issue is related to the i740 driver in the Linux Kernel, where a Userspace program can pass any values to the driver through the ioctl() interface. The driver does not check the value of pixclock, which may cause a divide by zero error. This could potentially allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

BDU:2023-00453

CVE-2022-3061

DLA-3173-1

DSA-5257-1

DSA-5257-2

MGASA-2022-0379

MGASA-2022-0380

OESA-2022-1925

OESA-2022-1926

OESA-2022-1927

USN-5790-1

USN-5791-1

USN-5791-2

USN-5791-3

USN-5792-1

USN-5792-2

USN-5815-1

USN-5877-1

USN-5976-1

USN-6001-1

USN-6013-1

USN-6014-1

Affected Products

Astra Linux

Linux Kernel

Linuxmint

Ubuntu

References · 158

• 🔥 https://github.com/kiks7/CVE-2022-2602-Kernel-Exploit · Exploit
• 🔥 https://github.com/LukeGix/CVE-2022-2602 · Exploit
• 🔥❌ https://github.com/V4bel/CVE-2022-41218 · Exploit, Deleted
• https://ubuntu.com/security/CVE-2023-26607 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-28712 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5792-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-1095 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3659 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-2380 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5257-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1516 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1205 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-2663 · Security Note
• https://ubuntu.com/security/CVE-2022-1016 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-0416SE47 · Vendor Advisory