PT-2025-49643 · Linux · Linux Kernel
Published
2025-12-09
·
Updated
2026-02-24
·
CVE-2023-53783
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a flaw in the block I/O cost model (
calc lcoefs() function) that can lead to a divide-by-zero error. This occurs when a maximum value is echoed to the cost.model parameter, potentially causing an overflow if the sum of bytes per second (bps) and IOC PAGE SIZE exceeds the maximum value of an unsigned 64-bit integer (ULLONG MAX). The issue is triggered when using the echo command to set the cost.model value, for example: echo 8:0 rbps=18446744073709551615 > /sys/fs/cgroup/io.cost.model. The calc lcoefs() function utilizes the input value in DIV ROUND UP ULL, which results in the error.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel