Linux Kernel Division by Zero Vulnerability in Framebuffer CVT Handling

A vulnerability in the Linux kernel's framebuffer (fbdev) component has been addressed. The issue arose in the function fb_find_mode_cvt(), where an overflow could occur if the mode's refresh rate was 0x80000000. This overflow would result in a refresh value of 0, which is then used as a divisor in fb_cvt_hperiod(). Such a division by zero would cause a kernel oops error. The vulnerability has been resolved by adding a sanity check to prevent the overflow.

Impact

Exploitation of this vulnerability could lead to a division by zero error, causing a kernel oops, which is a type of error that indicates a serious problem in the kernel that can lead to a system crash.