PT-2025-25904 · Linux+2 · Linux Kernel+2

Published 2022-08-18 · Updated 2025-07-28 · CVE-2022-49978

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential divide by zero error has been identified in the Linux kernel, specifically in the fb pm2fb function of the fbdev module. This issue arises when the do fb ioctl() function in fbmem.c processes a user-provided var structure, which is then passed through fb set var() and info->fbops->fb check var(), potentially calling pm2fb check var(). The error occurs when the var->pixclock value is zero, causing a division by zero in the pm2fb check var() function. This bug was discovered by Syzkaller, a kernel fuzzing tool.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

BDU:2026-04501

CVE-2022-49978

SUSE-SU-2025:02264-1

SUSE-SU-2025:02308-1

SUSE-SU-2025:02320-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02334-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02308-1

SUSE-SU-2025_02334-1

SUSE-SU-2025_02537-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 745

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49978.json · Exploit
• https://git.kernel.org/stable/c/7f88cdfea8d7f4dbaf423d808241403b2bb945e4 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49978 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02308-1 · Vendor Advisory
• https://git.kernel.org/stable/c/0f1174f4972ea9fad6becf8881d71adca8e9ca91 · Patch
• https://git.kernel.org/stable/c/8fc778ee2fb2853f7a3531fa7273349640d8e4e9 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49978 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02334-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49978 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02537-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49978 · Vendor Advisory
• https://git.kernel.org/stable/c/34c3dea1189525cd533071ed5c176fc4ea8d982b · Patch
• https://git.kernel.org/stable/c/3ec326a6a0d4667585ca595f438c7293e5ced7c4 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02264-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49978 · Security Note