| { |
| "containers": { |
| "cna": { |
| "providerMetadata": { |
| "orgId": "f4215fc3-5b6b-47ff-a258-f7189bd81038" |
| }, |
| "descriptions": [ |
| { |
| "lang": "en", |
| "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again\n\n(struct dirty_throttle_control *)->thresh is an unsigned long, but is\npassed as the u32 divisor argument to div_u64(). On architectures where\nunsigned long is 64 bytes, the argument will be implicitly truncated.\n\nUse div64_u64() instead of div_u64() so that the value used in the \"is\nthis a safe division\" check is the same as the divisor.\n\nAlso, remove redundant cast of the numerator to u64, as that should happen\nimplicitly.\n\nThis would be difficult to exploit in memcg domain, given the ratio-based\narithmetic domain_drity_limits() uses, but is much easier in global\nwriteback domain with a BDI_CAP_STRICTLIMIT-backing device, using e.g. \nvm.dirty_bytes=(1<<32)*PAGE_SIZE so that dtc->thresh == (1<<32)" |
| } |
| ], |
| "affected": [ |
| { |
| "product": "Linux", |
| "vendor": "Linux", |
| "defaultStatus": "unaffected", |
| "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", |
| "programFiles": [ |
| "mm/page-writeback.c" |
| ], |
| "versions": [ |
| { |
| "version": "f6789593d5cea42a4ecb1cbeab6a23ade5ebbba7", |
| "lessThan": "c593d26fb5d577ef31b6e49a31e08ae3ebc1bc1e", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "f6789593d5cea42a4ecb1cbeab6a23ade5ebbba7", |
| "lessThan": "253f9ea7e8e53a5176bd80ceb174907b10724c1a", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "f6789593d5cea42a4ecb1cbeab6a23ade5ebbba7", |
| "lessThan": "1f12e4b3284d6c863f272eb2de0d4248ed211cf4", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "f6789593d5cea42a4ecb1cbeab6a23ade5ebbba7", |
| "lessThan": "23a28f5f3f6ca1e4184bd0e9631cd0944cf1c807", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "f6789593d5cea42a4ecb1cbeab6a23ade5ebbba7", |
| "lessThan": "81e7d2530d458548b90a5c5e76b77ad5e5d1c0df", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "f6789593d5cea42a4ecb1cbeab6a23ade5ebbba7", |
| "lessThan": "145faa3d03688cbb7bbaaecbd84c01539852942c", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "f6789593d5cea42a4ecb1cbeab6a23ade5ebbba7", |
| "lessThan": "5099871b370335809c0fd1abad74d9c7c205d43f", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "f6789593d5cea42a4ecb1cbeab6a23ade5ebbba7", |
| "lessThan": "2820005edae13b140f2d54267d1bd6bb23915f59", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "f6789593d5cea42a4ecb1cbeab6a23ade5ebbba7", |
| "lessThan": "16b1025eaa8fc223ab4273ece20d1c3a4211a95d", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "f6789593d5cea42a4ecb1cbeab6a23ade5ebbba7", |
| "lessThan": "cbbe17a324437c0ff99881a3ee453da45b228a00", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "f6789593d5cea42a4ecb1cbeab6a23ade5ebbba7", |
| "lessThan": "ec18ec230301583395576915d274b407743d8f6c", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "f6789593d5cea42a4ecb1cbeab6a23ade5ebbba7", |
| "lessThan": "f6620df12cb6bdcad671d269debbb23573502f9d", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "f6789593d5cea42a4ecb1cbeab6a23ade5ebbba7", |
| "lessThan": "65977bed167a92e87085e757fffa5798f7314c9f", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "f6789593d5cea42a4ecb1cbeab6a23ade5ebbba7", |
| "lessThan": "9319b647902cbd5cc884ac08a8a6d54ce111fc78", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "f6789593d5cea42a4ecb1cbeab6a23ade5ebbba7", |
| "lessThan": "000099d71648504fb9c7a4616f92c2b70c3e44ec", |
| "status": "affected", |
| "versionType": "git" |
| } |
| ] |
| }, |
| { |
| "product": "Linux", |
| "vendor": "Linux", |
| "defaultStatus": "affected", |
| "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", |
| "programFiles": [ |
| "mm/page-writeback.c" |
| ], |
| "versions": [ |
| { |
| "version": "3.16", |
| "status": "affected" |
| }, |
| { |
| "version": "0", |
| "lessThan": "3.16", |
| "status": "unaffected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "4.19.307", |
| "lessThanOrEqual": "4.19.*", |
| "status": "unaffected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "4.19.318", |
| "lessThanOrEqual": "4.19.*", |
| "status": "unaffected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "5.4.269", |
| "lessThanOrEqual": "5.4.*", |
| "status": "unaffected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "5.4.280", |
| "lessThanOrEqual": "5.4.*", |
| "status": "unaffected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "5.10.210", |
| "lessThanOrEqual": "5.10.*", |
| "status": "unaffected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "5.10.222", |
| "lessThanOrEqual": "5.10.*", |
| "status": "unaffected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "5.15.149", |
| "lessThanOrEqual": "5.15.*", |
| "status": "unaffected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "5.15.163", |
| "lessThanOrEqual": "5.15.*", |
| "status": "unaffected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "6.1.79", |
| "lessThanOrEqual": "6.1.*", |
| "status": "unaffected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "6.1.98", |
| "lessThanOrEqual": "6.1.*", |
| "status": "unaffected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "6.6.18", |
| "lessThanOrEqual": "6.6.*", |
| "status": "unaffected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "6.6.39", |
| "lessThanOrEqual": "6.6.*", |
| "status": "unaffected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "6.7.6", |
| "lessThanOrEqual": "6.7.*", |
| "status": "unaffected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "6.8", |
| "lessThanOrEqual": "*", |
| "status": "unaffected", |
| "versionType": "original_commit_for_fix" |
| }, |
| { |
| "version": "6.9.9", |
| "lessThanOrEqual": "6.9.*", |
| "status": "unaffected", |
| "versionType": "semver" |
| } |
| ] |
| } |
| ], |
| "references": [ |
| { |
| "url": "https://git.kernel.org/stable/c/c593d26fb5d577ef31b6e49a31e08ae3ebc1bc1e" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/253f9ea7e8e53a5176bd80ceb174907b10724c1a" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/1f12e4b3284d6c863f272eb2de0d4248ed211cf4" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/23a28f5f3f6ca1e4184bd0e9631cd0944cf1c807" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/81e7d2530d458548b90a5c5e76b77ad5e5d1c0df" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/145faa3d03688cbb7bbaaecbd84c01539852942c" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/5099871b370335809c0fd1abad74d9c7c205d43f" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/2820005edae13b140f2d54267d1bd6bb23915f59" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/16b1025eaa8fc223ab4273ece20d1c3a4211a95d" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/cbbe17a324437c0ff99881a3ee453da45b228a00" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/ec18ec230301583395576915d274b407743d8f6c" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/f6620df12cb6bdcad671d269debbb23573502f9d" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/65977bed167a92e87085e757fffa5798f7314c9f" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/9319b647902cbd5cc884ac08a8a6d54ce111fc78" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/000099d71648504fb9c7a4616f92c2b70c3e44ec" |
| } |
| ], |
| "title": "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again", |
| "x_generator": { |
| "engine": "bippy-5f407fcff5a0" |
| } |
| } |
| }, |
| "cveMetadata": { |
| "assignerOrgId": "f4215fc3-5b6b-47ff-a258-f7189bd81038", |
| "cveID": "CVE-2024-26720", |
| "requesterUserId": "gregkh@kernel.org", |
| "serial": "1", |
| "state": "PUBLISHED" |
| }, |
| "dataType": "CVE_RECORD", |
| "dataVersion": "5.0" |
| } |
