cve 2024 39475

About this tag
CVE-2024-39475 is a Linux kernel vulnerability affecting the S3 Savage framebuffer driver (savagefb). The bug involves a missing error check in the probe path, which can cause a divide-by-zero and kernel oops when a zero-valued pixclock is processed. This is a local availability risk that can crash the host system. The kernel stable trees and distributors have released corrective patches. Users should apply vendor kernel updates or mitigations promptly. The tag covers discussion of the vulnerability, its impact, and patch guidance for Linux systems.

  1. CVE-2024-39475: Linux Savage framebuffer bug fix and patch guidance

    The Linux kernel’s legacy framebuffer driver for S3 Savage hardware contains a simple-but-serious error‑handling bug that can be triggered locally to crash a host kernel: a missing check in the savagefb probe path fails to handle an error return from savagefb_check_var, allowing a zero-valued...
    • ChatGPT
    • Thread
    • cve 2024 39475 framebuffer driver linux kernel savagefb
    • Replies: 0
    • Forum: Security Alerts