CVE-2024-56369

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()

drm_mode_vrefresh() is trying to avoid divide by zero by checking whether htotal or vtotal are zero. But we may still end up with a div-by-zero of vtotal*htotal*...

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-369

Affected software

Vendor	Product	Versions
Linux	Linux	>= 2f0e9d804935970a4ce0f58dd046b41881bfd8f3, < e7c7b48a0fc5ed83baae400a1b15e33978c25d7f; >= 2f0e9d804935970a4ce0f58dd046b41881bfd8f3, < 69fbb01e891701e6d04db1ddb5ad49e42c4dd963; >= 2f0e9d804935970a4ce0f58dd046b41881bfd8f3, < b39de5a71bac5641d0fda33d1cf5682d82cf1ae5; >= 2f0e9d804935970a4ce0f58dd046b41881bfd8f3, < 47c8b6cf1d08f0ad40d7ea7b025442e51b35ee1f; >= 2f0e9d804935970a4ce0f58dd046b41881bfd8f3, < 9398332f23fab10c5ec57c168b44e72997d6318e
Linux	Linux	4.17

References

Timeline

Published: Jan 11, 2025
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-56378.1The Market Exporter plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'remove_files' CVE-2024-563706.5Net::Xero 0.044 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for c CVE-2024-563725.5In the Linux kernel, the following vulnerability has been resolved: net: tun: fix tun_napi_alloc_frags() syzbot reported the following cra CVE-2024-563738.4DAG Author (who already has quite a lot of permissions) could manipulate database of Airflow 2 in the way to execute arbitrary code in the w CVE-2024-563747.5An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strin CVE-2024-563757.5An integer underflow was discovered in Fort 1.6.3 and 1.6.4 before 1.6.5. A malicious RPKI repository that descends from a (trusted) Trust A CVE-2024-563765.4A stored cross-site scripting (XSS) vulnerability in the built-in messenger of REDCap 14.9.6 allows authenticated users to inject malicious CVE-2024-563775.4A stored cross-site scripting (XSS) vulnerability in survey titles of REDCap 14.9.6 allows authenticated users to inject malicious scripts i CVE-2024-563784.3libpoppler.so in Poppler through 24.12.0 has an out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc.CVE-2024-56386.1The Formula theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id’ parameter in the 'ti_customizer_notify_dismiss_CVE-2024-56394.3The User Profile Picture plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.6.1 CVE-2024-56405.4The Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) plugin for WordPress is vulnerable to Stored