CVE-2024-35925

Summary

In the Linux kernel, the following vulnerability has been resolved:

block: prevent division by zero in blk_rq_stat_sum()

The expression dst->nr_samples + src->nr_samples may have zero value on overflow. It is necessary to add a check to avoid division by zero.

Found by Linux Verification Center (linuxtesting.org) with Svace.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxeca8b53a6769e60d6d8240d71202d73b0af81901 < 6a55dab4ac956deb23690eedd74e70b892a378e7affected
LinuxLinuxeca8b53a6769e60d6d8240d71202d73b0af81901 < edd073c78d2bf48c5b8bf435bbc3d61d6e7c6c14affected
LinuxLinuxeca8b53a6769e60d6d8240d71202d73b0af81901 < b0cb5564c3e8e0ee0a2d28c86fa7f02e82d64c3caffected
LinuxLinuxeca8b53a6769e60d6d8240d71202d73b0af81901 < 21e7d72d0cfcbae6042d498ea2e6f395311767f8affected
LinuxLinuxeca8b53a6769e60d6d8240d71202d73b0af81901 < 512a01da7134bac8f8b373506011e8aaa3283854affected
LinuxLinuxeca8b53a6769e60d6d8240d71202d73b0af81901 < 5f7fd6aa4c4877d77133ea86c14cf256f390b2feaffected
LinuxLinuxeca8b53a6769e60d6d8240d71202d73b0af81901 < 98ddf2604ade2d954bf5ec193600d5274a43fd68affected
LinuxLinuxeca8b53a6769e60d6d8240d71202d73b0af81901 < 93f52fbeaf4b676b21acfe42a5152620e6770d02affected
LinuxLinux4.15affected
LinuxLinux0 < 4.15unaffected
LinuxLinux4.19.312 <= 4.19.*unaffected
LinuxLinux5.4.274 <= 5.4.*unaffected
LinuxLinux5.10.215 <= 5.10.*unaffected
LinuxLinux5.15.155 <= 5.15.*unaffected
LinuxLinux6.1.86 <= 6.1.*unaffected
LinuxLinux6.6.27 <= 6.6.*unaffected
LinuxLinux6.8.6 <= 6.8.*unaffected
LinuxLinux6.9 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

Additional References

References