CVE-2021-47641

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

video: fbdev: cirrusfb: check pixclock to avoid divide by zero

Do a sanity check on pixclock value to avoid divide by zero.

If the pixclock value is zero, the cirrusfb driver will round up pixclock to get the derived frequency as close to maxclock as possible.

Syzkaller reported a divide error in cirrusfb_check_pixclock.

divide error: 0000 [#1] SMP KASAN PTI CPU: 0 PID: 14938 Comm: cirrusfb_test Not tainted 5.15.0-rc6 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.11.0-2 RIP: 0010:cirrusfb_check_var+0x6f1/0x1260

Call Trace: fb_set_var+0x398/0xf90 do_fb_ioctl+0x4b8/0x6f0 fb_ioctl+0xeb/0x130 __x64_sys_ioctl+0x19d/0x220 do_syscall_64+0x3a/0x80 entry_SYSCALL_64_after_hwframe+0x44/0xae

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-369

Affected software

VendorProductVersions
LinuxLinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < c656d04247a2654ede5cead2ecbf83431dad5261; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 1d3fb46439ad4e8f0c5739eb33d1875ac9e0f135; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 40b13e3d85744210db13457785646634e2d056bd; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 53a2088a396cfa1da92690a1da289634cd73bf0d; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 8c7e2141fb89c620ab4e41512e262fbf25b8260d; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 6fe23ff94e7840097202e85c148688940b37c9b1; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 45800c42ef000f417270bcfc08630e42486fca99; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < e498b504f8c81b07efab9febf8503448de4dc9cf; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 5c6f402bdcf9e7239c6bc7087eda71ac99b31379
LinuxLinux2.6.12

References

Timeline

Published
Feb 26, 2025
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-476427.8In the Linux kernel, the following vulnerability has been resolved: video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow CoverCVE-2021-476435.5In the Linux kernel, the following vulnerability has been resolved: media: ir_toy: free before error exiting Fix leak in error path.CVE-2021-476445.5In the Linux kernel, the following vulnerability has been resolved: media: staging: media: zoran: move videodev alloc Move some code out oCVE-2021-476455.5In the Linux kernel, the following vulnerability has been resolved: media: staging: media: zoran: calculate the right buffer number for zorCVE-2021-476467.8In the Linux kernel, the following vulnerability has been resolved: Revert "Revert "block, bfq: honor already-setup queue merges"" A crashCVE-2021-476475.5In the Linux kernel, the following vulnerability has been resolved: clk: qcom: ipq8074: fix PCI-E clock oops Fix PCI-E clock related kerneCVE-2021-476485.5In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix a memory leak in 'host1x_remove()' Add a missing 'hosCVE-2021-476495.5In the Linux kernel, the following vulnerability has been resolved: udmabuf: validate ubuf->pagecount Syzbot has reported GPF in sg_alloc_CVE-2021-476505.5In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-compress: prevent the potentially use of null pointer There CVE-2021-476515.5In the Linux kernel, the following vulnerability has been resolved: soc: qcom: rpmpd: Check for null return of devm_kcalloc Because of theCVE-2021-476525.5In the Linux kernel, the following vulnerability has been resolved: video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() I got a nCVE-2021-476537.8In the Linux kernel, the following vulnerability has been resolved: media: davinci: vpif: fix use-after-free on driver unbind The driver a
CVE-2021-47641: Medium severity, CVSS 5.5 | Vulnix