PT-2024-7325 · Linux+9 · Linux Kernel+9
Published
2024-01-25
·
Updated
2026-05-26
·
CVE-2024-26720
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to a possible divide-by-zero error in the
wb dirty limits() function. This error occurs because the thresh value, which is an unsigned long, is passed as a u32 divisor argument to div u64(). On architectures where unsigned long is 64 bytes, the argument will be implicitly truncated. To fix this, div64 u64() is used instead of div u64() to ensure the value used in the "is this a safe division" check is the same as the divisor. The vulnerability is difficult to exploit in the memcg domain but easier in the global writeback domain with a BDI CAP STRICTLIMIT-backing device.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Divide By Zero
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu