Vulnerability · Published Jul 30, 2024 · Assigned by Linux
CVE-2024-42102Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
Medium 4.7
In plain English
A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
In the Linux kernel, the following vulnerability has been resolved: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" Patch series "mm: Avoid possible overflows in dirty throttling". Dirty throttling logic assumes dirty limits in page units fit into 32-bits. This patch series makes sure this is true (see patch 2/2 for more details). This patch (of 2): This reverts commit 9319b647902cbd5cc884ac08a8a6d54ce111fc78. The commit is broken in several ways. Firstly, the removed (u64) cast from the multiplication will introduce a multiplication overflow on 32-bit archs if wb_thresh * bg_thresh >= 1<<32 (which is actually common - the default settings with 4GB of RAM will trigger this). Secondly, the div64_u64() is unnecessarily expensive on 32-bit archs. We have div64_ul() in case we want to be safe & cheap. Thirdly, if dirty thresholds are larger than 1<<32 pages, then dirty balancing is going to blow up in many other spectacular ways anyway so trying to fix one possible overflow is just moot.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:9 | bpftool | 7.3.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-64k | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-64k-core | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-64k-debug | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-64k-debug-core | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-64k-debug-devel | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-64k-debug-devel-matched | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-64k-debug-modules | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-64k-debug-modules-core | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-64k-debug-modules-extra | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-64k-devel | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-64k-devel-matched | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-64k-modules | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-64k-modules-core | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-64k-modules-extra | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-abi-stablelists | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-core | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-cross-headers | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-debug | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-debug-core | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-debug-devel | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-debug-devel-matched | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-debug-modules | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-debug-modules-core | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-debug-modules-extra | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-debug-uki-virt | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-devel | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-devel-matched | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-doc | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-headers | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-modules | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-modules-core | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-modules-extra | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-rt | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-rt-core | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-rt-debug | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-rt-debug-core | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-rt-debug-devel | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-rt-debug-modules | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-rt-debug-modules-core | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-rt-debug-modules-extra | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-rt-devel | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-rt-modules | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-rt-modules-core | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-rt-modules-extra | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-tools | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-tools-libs | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-tools-libs-devel | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-uki-virt | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-zfcpdump | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-zfcpdump-core | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-zfcpdump-devel | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-zfcpdump-devel-matched | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-zfcpdump-modules | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-zfcpdump-modules-core | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | kernel-zfcpdump-modules-extra | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | libperf | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | perf | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | python3-perf | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | rtla | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| AlmaLinux:9 | rv | 5.14.0-427.35.1.el9_4 | ALSA-2024:6567 |
| Debian:12 | linux | 6.1.98-1 | DEBIAN-CVE-2024-42102 |
| Debian:13 | linux | 6.9.9-1 | DEBIAN-CVE-2024-42102 |
| Debian:14 | linux | 6.9.9-1 | DEBIAN-CVE-2024-42102 |
| Rocky Linux:9 | kernel | 0:5.14.0-427.35.1.el9_4.cloud.1.0 | RXSA-2024:6567 |
| Rocky Linux:9 | kernel | 0:5.14.0-427.35.1.el9_4 | RLSA-2024:6567 |
| Ubuntu:22.04:LTS | linux | 5.15.0-121.131 | UBUNTU-CVE-2024-42102 |
| Ubuntu:24.04:LTS | linux | 6.8.0-48.48 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1069.75 | UBUNTU-CVE-2024-42102 |
| Ubuntu:24.04:LTS | linux-aws | 6.8.0-1018.20 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-aws-6.5 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-aws-6.8 | 6.8.0-1018.19~22.04.1 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1072.81 | UBUNTU-CVE-2024-42102 |
| Ubuntu:24.04:LTS | linux-azure | 6.8.0-1017.20 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-azure-6.5 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-azure-6.8 | 6.8.0-1017.20~22.04.1 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1072.81.1 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1068.76 | UBUNTU-CVE-2024-42102 |
| Ubuntu:24.04:LTS | linux-gcp | 6.8.0-1017.19 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-gcp-6.5 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-gcp-6.8 | 6.8.0-1017.19~22.04.1 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1066.72 | UBUNTU-CVE-2024-42102 |
| Ubuntu:24.04:LTS | linux-gke | 6.8.0-1013.17 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1052.59 | UBUNTU-CVE-2024-42102 |
| Ubuntu:24.04:LTS | linux-gkeop | 6.8.0-1002.4 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-hwe-6.5 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-hwe-6.8 | 6.8.0-48.48~22.04.1 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1062.65 | UBUNTU-CVE-2024-42102 |
| Ubuntu:24.04:LTS | linux-ibm | 6.8.0-1015.15 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-ibm-6.8 | 6.8.0-1015.15~22.04.1 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1064.70 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1066.71 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-121.131 | UBUNTU-CVE-2024-42102 |
| Ubuntu:24.04:LTS | linux-lowlatency | 6.8.0-48.48.3 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.5 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.8 | 6.8.0-48.48.3~22.04.1 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1064.65 | UBUNTU-CVE-2024-42102 |
| Ubuntu:24.04:LTS | linux-nvidia | 6.8.0-1017.19 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-nvidia-6.5 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-nvidia-6.8 | 6.8.0-1017.19~22.04.1 | UBUNTU-CVE-2024-42102 |
| Ubuntu:24.04:LTS | linux-nvidia-lowlatency | 6.8.0-1017.19.1 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra | 5.15.0-1028.28 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra-igx | 5.15.0-1016.16 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-oem-6.5 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:24.04:LTS | linux-oem-6.8 | 6.8.0-1016.16 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1067.73 | UBUNTU-CVE-2024-42102 |
| Ubuntu:24.04:LTS | linux-oracle | 6.8.0-1015.16 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-oracle-6.5 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-oracle-6.8 | 6.8.0-1015.15~22.04.1 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1062.65 | UBUNTU-CVE-2024-42102 |
| Ubuntu:24.04:LTS | linux-raspi | 6.8.0-1014.16 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:24.04:LTS | linux-riscv | 6.8.0-48.48.1 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-riscv-6.5 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-riscv-6.8 | 6.8.0-48.48.1~22.04.2 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-starfive-6.2 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-starfive-6.5 | no fix listed | UBUNTU-CVE-2024-42102 |
| Ubuntu:24.04:LTS | linux-xilinx | 6.8.0-1009.10 | UBUNTU-CVE-2024-42102 |
| Ubuntu:22.04:LTS | linux-xilinx-zynqmp | 5.15.0-1035.39 | UBUNTU-CVE-2024-42102 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | c593d26fb5d577ef31b6e49a31e08ae3ebc1bc1e – before 253f9ea7e8e53a5176bd80ceb174907b10724c1a1f12e4b3284d6c863f272eb2de0d4248ed211cf4 – before 23a28f5f3f6ca1e4184bd0e9631cd0944cf1c80781e7d2530d458548b90a5c5e76b77ad5e5d1c0df – before 145faa3d03688cbb7bbaaecbd84c01539852942c5099871b370335809c0fd1abad74d9c7c205d43f – before 2820005edae13b140f2d54267d1bd6bb23915f5916b1025eaa8fc223ab4273ece20d1c3a4211a95d – before cbbe17a324437c0ff99881a3ee453da45b228a00ec18ec230301583395576915d274b407743d8f6c – before f6620df12cb6bdcad671d269debbb23573502f9d9319b647902cbd5cc884ac08a8a6d54ce111fc78 – before 000099d71648504fb9c7a4616f92c2b70c3e44ec9319b647902cbd5cc884ac08a8a6d54ce111fc78 – before 30139c702048f1097342a31302cbd3d478f50c63 |
| Linux | Linux | 6.8 |
References
- https://git.kernel.org/stable/c/253f9ea7e8e53a5176bd80ceb174907b10724c1a
- https://git.kernel.org/stable/c/23a28f5f3f6ca1e4184bd0e9631cd0944cf1c807
- https://git.kernel.org/stable/c/145faa3d03688cbb7bbaaecbd84c01539852942c
- https://git.kernel.org/stable/c/2820005edae13b140f2d54267d1bd6bb23915f59
- https://git.kernel.org/stable/c/cbbe17a324437c0ff99881a3ee453da45b228a00
- https://git.kernel.org/stable/c/f6620df12cb6bdcad671d269debbb23573502f9d
- https://git.kernel.org/stable/c/000099d71648504fb9c7a4616f92c2b70c3e44ec
- https://git.kernel.org/stable/c/30139c702048f1097342a31302cbd3d478f50c63
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html