PT-2024-33729 · Linux+7 · Linux Kernel+7
Zac Ecob
·
Published
2024-10-21
·
Updated
2026-05-26
·
CVE-2024-49888
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A problem in the Linux kernel has been identified where a bpf program may cause a kernel crash due to a signed divide error. The issue arises when the divisor is -1, which can lead to an overflow. On x86 64 platforms, this can cause a kernel exception, while on arm64 platforms, the result is handled differently. The error occurs due to the division of
LLONG MIN by -1, which should result in a positive number but exceeds the maximum positive value for 64-bit systems. Further investigation found that similar cases involving INT MIN and modulus operations can also trigger exceptions on x86 64. Pseudo codes have been provided to handle these exceptions and align the results with those on arm64 platforms.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Suse
Ubuntu