CVE-2024-42102

Medium

In the Linux kernel, the following vulnerability has been resolved: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" Patch series "mm: Avoid possible overflows in dirty throttling". Dirty throttling logic assumes dirty limits in page units fit into 32-bits. This patch series makes sure this is true (see patch 2/2 for more details). This patch (of 2): This reverts commit 9319b647902cbd5cc884ac08a8a6d54ce111fc78. The commit is broken in several ways. Firstly, the removed (u64) cast from the multiplication will introduce a multiplication overflow on 32-bit archs if wb_thresh * bg_thresh >= 1<<32 (which is actually common - the default settings with 4GB of RAM will trigger this). Secondly, the div64_u64() is unnecessarily expensive on 32-bit archs. We have div64_ul() in case we want to be safe & cheap. Thirdly, if dirty thresholds are larger than 1<<32 pages, then dirty balancing is going to blow up in many other spectacular ways anyway so trying to fix one possible overflow is just moot.

Package Linux Kernel
Published 2024-07-30
Last modified 2025-11-03
CVSS version 3.1
Patch available
Awaiting data

CVSS 3.1 score

4.7

out of 10
Medium
Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
High
Vector string
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness type

CWE-369

CVE-2024-42102 is a Divide By Zero vulnerability

What is Divide By Zero?

The product divides a value by zero, causing a crash or unexpected behaviour. Learn more on MITRE CWE

References

The following references provide additional information about CVE-2024-42102 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.

8 patch commits total View all on NVD

Frequently asked questions

  • What is CVE-2024-42102?

    CVE-2024-42102 is a Medium severity Linux kernel vulnerability with a CVSS score of 4.7 out of 10 , classified as a Divide By Zero flaw (CWE-369) . CVE-2024-42102 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

  • What is the CVSS score for CVE-2024-42102?

    CVE-2024-42102 has a CVSS score of 4.7 out of 10, rated Medium severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H .

  • Is there a patch available for CVE-2024-42102?

    No patch is currently available for CVE-2024-42102. Monitor the NIST NVD and your Linux distribution's security advisories for updates.

  • Is CVE-2024-42102 actively exploited?

    No — CVE-2024-42102 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

  • What is Divide By Zero (CWE-369)?

    The product divides a value by zero, causing a crash or unexpected behaviour. View CWE-369 on MITRE CWE →

Back to
All CVEs
View on
NVD / NIST