CVE-2024-26720: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
In the Linux kernel, the following vulnerability has been resolved:
mm/writeback: fix possible divide-by-zero in wbdirtylimits(), again
The Linux kernel CVE team has assigned CVE-2024-26720 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024040344-CVE-2024-26720-06fa@gregkh/T
Other sources
In the Linux kernel, the following vulnerability has been resolved: mm/writeback: fix possible divide-by-zero in wbdirtylimits(), again (struct dirtythrottlecontrol )->thresh is an unsigned long, but is passed as the u32 divisor argument to divu64(). On architectures where unsigned long is 64 bytes, the argument will be implicitly truncated. Use div64u64() instead of divu64() so that the value used in the "is this a safe division" check is the same as the divisor. Also, remove redundant cast of the numerator to u64, as that should happen implicitly. This would be difficult to exploit in memcg domain, given the ratio-based arithmetic domaindritylimits() uses, but is much easier in global writeback domain with a BDICAPSTRICTLIMIT-backing device, using e.g. vm.dirtybytes=(1<<32)PAGESIZE so that dtc->thresh == (1<<32)
— Launchpad
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26720?
CVE-2024-26720 is classified as a low severity vulnerability in the Linux kernel.
How do I fix CVE-2024-26720?
To resolve CVE-2024-26720, you should update your Linux kernel to versions 4.19.307, 5.4.269, 5.10.210, 5.15.149, 6.1.79, 6.6.18, 6.7.6, or 6.8.
Which software is affected by CVE-2024-26720?
CVE-2024-26720 affects various versions of the Linux kernel as identified in the affected software list.
What can occur due to CVE-2024-26720?
CVE-2024-26720 may lead to a divide-by-zero error in the wb_dirty_limits() function.
Is CVE-2024-26720 patched?
Yes, CVE-2024-26720 has been resolved in the latest kernel updates.