PT-2025-7952 · Linux+3 · Linux Kernel+3

Published 2025-02-26 · Updated 2025-05-21 · CVE-2021-47641

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.0-rc6

Description A divide by zero error has been identified in the Linux kernel, specifically in the cirrusfb driver. The issue arises when the pixclock value is zero, causing the driver to round up pixclock and potentially leading to a divide error. This error was reported by Syzkaller in the cirrusfb check pixclock function. The error occurs in the cirrusfb check var function and is triggered by an ioctl call.

Recommendations For Linux kernel versions prior to 5.15.0-rc6, consider applying a patch that includes the sanity check on the pixclock value to avoid the divide by zero error. As a temporary workaround, avoid using the cirrusfb driver with a pixclock value of zero until a patch is available.

Exploit

Fix

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

CVE-2021-47641

OESA-2025-1465

OPENSUSE-SU-2025_1263-1

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 1383

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5753.md · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-0995 · Exploit
• 🔥 https://github.com/TurtleARM/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/H4K6/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/EdwardOwusuAdjei/Spectre-PoC · Exploit
• https://git.kernel.org/stable/c/6fe23ff94e7840097202e85c148688940b37c9b1 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47641 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49086 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-21764 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49298 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21762 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52935 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-36789 · Security Note