In the Linux kernel, the framebuffer driver sm750fb contains a function ps_to_hz that divides by the pixclock value supplied by the FBIOPUT_VSCREENINFO ioctl. When a zero pixclock is passed, the driver performs an illicit division by zero. This arithmetic error (CWE‑369) could lead to a kernel crash or system reboot (inferred). The absence of validation allows an attacker to trigger a denial of service.

The vulnerability applies to any Linux kernel build that includes the staging sm750fb framebuffer driver before the patch is applied. No specific kernel versions are enumerated, so all builds containing this code are potentially affected.

The EPSS score is less than 1 % and the vulnerability is not listed in the CISA KEV catalog, indicating a low probability of exploitation. The CVSS score is 5.5, indicating moderate severity. The likely attack vector involves a privileged user issuing the FBIOPUT_VSCREENINFO ioctl to set pixclock to zero, which can trigger a division by zero. Based on the description, it is inferred that the ioctl typically requires privileged or root access. Once patched, the driver rejects zero pixclock values, preventing the division by zero. The impact is high in environments with the sm750fb driver but the overall risk remains modest due to the low exploitation probability.