CVE-2024-35925
block: prevent division by zero in blk_rq_stat_sum()
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
19 May 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In the Linux kernel, the following vulnerability has been resolved:
block: prevent division by zero in blk_rq_stat_sum()
The expression dst->nr_samples + src->nr_samples may
have zero value on overflow. It is necessary to add
a check to avoid division by zero.
Found by Linux Verification Center (linuxtesting.org) with Svace.
Affected products
Linux · LinuxReferences
https://cert-portal.siemens.com/productcert/html/ssa-265688.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-398330.htmlhttps://git.kernel.org/stable/c/21e7d72d0cfcbae6042d498ea2e6f395311767f8https://git.kernel.org/stable/c/512a01da7134bac8f8b373506011e8aaa3283854https://git.kernel.org/stable/c/5f7fd6aa4c4877d77133ea86c14cf256f390b2fehttps://git.kernel.org/stable/c/6a55dab4ac956deb23690eedd74e70b892a378e7https://git.kernel.org/stable/c/93f52fbeaf4b676b21acfe42a5152620e6770d02https://git.kernel.org/stable/c/98ddf2604ade2d954bf5ec193600d5274a43fd68https://git.kernel.org/stable/c/b0cb5564c3e8e0ee0a2d28c86fa7f02e82d64c3chttps://git.kernel.org/stable/c/edd073c78d2bf48c5b8bf435bbc3d61d6e7c6c14https://lists.debian.org/debian-lts-announce/2024/06/msg00017.htmlhttps://lists.debian.org/debian-lts-announce/2024/06/msg00020.html