Vulnerability · Published Jul 30, 2024 · Assigned by Linux

CVE-2024-42102Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"

Medium 4.7

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)4.7Medium
Exploit odds (30 days)0.3%top 82.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" Patch series "mm: Avoid possible overflows in dirty throttling". Dirty throttling logic assumes dirty limits in page units fit into 32-bits. This patch series makes sure this is true (see patch 2/2 for more details). This patch (of 2): This reverts commit 9319b647902cbd5cc884ac08a8a6d54ce111fc78. The commit is broken in several ways. Firstly, the removed (u64) cast from the multiplication will introduce a multiplication overflow on 32-bit archs if wb_thresh * bg_thresh >= 1<<32 (which is actually common - the default settings with 4GB of RAM will trigger this). Secondly, the div64_u64() is unnecessarily expensive on 32-bit archs. We have div64_ul() in case we want to be safe & cheap. Thirdly, if dirty thresholds are larger than 1<<32 pages, then dirty balancing is going to blow up in many other spectacular ways anyway so trying to fix one possible overflow is just moot.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:9bpftool7.3.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-64k5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-64k-core5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-64k-debug5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-64k-debug-core5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-64k-debug-devel5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-64k-debug-devel-matched5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-64k-debug-modules5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-64k-debug-modules-core5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-64k-debug-modules-extra5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-64k-devel5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-64k-devel-matched5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-64k-modules5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-64k-modules-core5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-64k-modules-extra5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-abi-stablelists5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-core5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-cross-headers5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-debug5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-debug-core5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-debug-devel5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-debug-devel-matched5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-debug-modules5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-debug-modules-core5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-debug-modules-extra5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-debug-uki-virt5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-devel5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-devel-matched5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-doc5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-headers5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-modules5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-modules-core5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-modules-extra5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-rt5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-rt-core5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-rt-debug5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-rt-debug-core5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-rt-debug-devel5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-rt-debug-modules5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-rt-debug-modules-core5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-rt-debug-modules-extra5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-rt-devel5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-rt-modules5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-rt-modules-core5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-rt-modules-extra5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-tools5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-tools-libs5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-tools-libs-devel5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-uki-virt5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-zfcpdump5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-zfcpdump-core5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-zfcpdump-devel5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-zfcpdump-devel-matched5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-zfcpdump-modules5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-zfcpdump-modules-core5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9kernel-zfcpdump-modules-extra5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9libperf5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9perf5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9python3-perf5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9rtla5.14.0-427.35.1.el9_4ALSA-2024:6567
AlmaLinux:9rv5.14.0-427.35.1.el9_4ALSA-2024:6567
Debian:12linux6.1.98-1DEBIAN-CVE-2024-42102
Debian:13linux6.9.9-1DEBIAN-CVE-2024-42102
Debian:14linux6.9.9-1DEBIAN-CVE-2024-42102
Rocky Linux:9kernel0:5.14.0-427.35.1.el9_4.cloud.1.0RXSA-2024:6567
Rocky Linux:9kernel0:5.14.0-427.35.1.el9_4RLSA-2024:6567
Ubuntu:22.04:LTSlinux5.15.0-121.131UBUNTU-CVE-2024-42102
Ubuntu:24.04:LTSlinux6.8.0-48.48UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-aws5.15.0-1069.75UBUNTU-CVE-2024-42102
Ubuntu:24.04:LTSlinux-aws6.8.0-1018.20UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1018.19~22.04.1UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-azure5.15.0-1072.81UBUNTU-CVE-2024-42102
Ubuntu:24.04:LTSlinux-azure6.8.0-1017.20UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1017.20~22.04.1UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1072.81.1UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-gcp5.15.0-1068.76UBUNTU-CVE-2024-42102
Ubuntu:24.04:LTSlinux-gcp6.8.0-1017.19UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1017.19~22.04.1UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-gke5.15.0-1066.72UBUNTU-CVE-2024-42102
Ubuntu:24.04:LTSlinux-gke6.8.0-1013.17UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1052.59UBUNTU-CVE-2024-42102
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1002.4UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-48.48~22.04.1UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-ibm5.15.0-1062.65UBUNTU-CVE-2024-42102
Ubuntu:24.04:LTSlinux-ibm6.8.0-1015.15UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1015.15~22.04.1UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1064.70UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-kvm5.15.0-1066.71UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-121.131UBUNTU-CVE-2024-42102
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-48.48.3UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-48.48.3~22.04.1UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1064.65UBUNTU-CVE-2024-42102
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1017.19UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1017.19~22.04.1UBUNTU-CVE-2024-42102
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1017.19.1UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1028.28UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1016.16UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2024-42102
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1016.16UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-oracle5.15.0-1067.73UBUNTU-CVE-2024-42102
Ubuntu:24.04:LTSlinux-oracle6.8.0-1015.16UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1015.15~22.04.1UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-raspi5.15.0-1062.65UBUNTU-CVE-2024-42102
Ubuntu:24.04:LTSlinux-raspi6.8.0-1014.16UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-42102
Ubuntu:24.04:LTSlinux-riscv6.8.0-48.48.1UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-48.48.1~22.04.2UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2024-42102
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1009.10UBUNTU-CVE-2024-42102
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1035.39UBUNTU-CVE-2024-42102

Affected products (as reported)

VendorProductVersions
Linux Linux c593d26fb5d577ef31b6e49a31e08ae3ebc1bc1e – before 253f9ea7e8e53a5176bd80ceb174907b10724c1a1f12e4b3284d6c863f272eb2de0d4248ed211cf4 – before 23a28f5f3f6ca1e4184bd0e9631cd0944cf1c80781e7d2530d458548b90a5c5e76b77ad5e5d1c0df – before 145faa3d03688cbb7bbaaecbd84c01539852942c5099871b370335809c0fd1abad74d9c7c205d43f – before 2820005edae13b140f2d54267d1bd6bb23915f5916b1025eaa8fc223ab4273ece20d1c3a4211a95d – before cbbe17a324437c0ff99881a3ee453da45b228a00ec18ec230301583395576915d274b407743d8f6c – before f6620df12cb6bdcad671d269debbb23573502f9d9319b647902cbd5cc884ac08a8a6d54ce111fc78 – before 000099d71648504fb9c7a4616f92c2b70c3e44ec9319b647902cbd5cc884ac08a8a6d54ce111fc78 – before 30139c702048f1097342a31302cbd3d478f50c63
Linux Linux 6.8

References