What is CVE-2024-56369?

CVE-2024-56369 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10, classified as a Divide By Zero flaw (CWE-369), affecting Linux kernel versions from 4.17 onward and patched in 5.15.176, 6.1.122, 6.6.68 and others. CVE-2024-56369 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2024-56369?

CVE-2024-56369 has a CVSS score of 5.5 out of 10, rated Medium severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Is there a patch available for CVE-2024-56369?

Yes, CVE-2024-56369 has been patched. Fixed versions include 5.15.176, 6.1.122, 6.6.68 and others. If you are running Linux kernel 4.17 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2024-56369 actively exploited?

CVE-2024-56369 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is Divide By Zero (CWE-369)?

The product divides a value by zero, causing a crash or unexpected behaviour. See MITRE CWE for full details: https://cwe.mitre.org/data/definitions/369.html

CVE-2024-56369

Medium

In the Linux kernel, the following vulnerability has been resolved: drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() drm_mode_vrefresh() is trying to avoid divide by zero by checking whether htotal or vtotal are zero. But we may still end up with a div-by-zero of vtotal*htotal*...

Package Linux Kernel

Published 2025-01-11

Last modified 2025-11-03

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

5.5

out of 10

Medium

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness type

CWE-369

CVE-2024-56369 is a Divide By Zero vulnerability

What is Divide By Zero?

The product divides a value by zero, causing a crash or unexpected behaviour. Learn more on MITRE CWE

Affected versions

Linux kernel versions 4.17 and later are affected. Fixed in 5.15.176, 6.1.122, 6.6.68, 6.12.7, 6.13 and their respective stable series.

Affected from

≥ 4.17

Fixed in

✓ 5.15.176 5.15.x ✓ 6.1.122 6.1.x ✓ 6.6.68 6.6.x ✓ 6.12.7 6.12.x ✓ 6.13

References

6 total

Kernel Git
https://git.kernel.org/stable/c/47c8b6cf1d08f0ad40d7ea7b025442e51b35ee1f

Patch
Kernel Git
https://git.kernel.org/stable/c/69fbb01e891701e6d04db1ddb5ad49e42c4dd963

Patch
Kernel Git
https://git.kernel.org/stable/c/9398332f23fab10c5ec57c168b44e72997d6318e

Patch
Kernel Git
https://git.kernel.org/stable/c/b39de5a71bac5641d0fda33d1cf5682d82cf1ae5

Patch
Kernel Git
https://git.kernel.org/stable/c/e7c7b48a0fc5ed83baae400a1b15e33978c25d7f

Patch

Showing 5 of 6 references View all on NVD

Details

CVE ID CVE-2024-56369

Severity Medium

CVSS score 5.5 / 10

CVSS version 3.1

Published 2025-01-11

Modified 2025-11-03

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2024-56369?

CVE-2024-56369 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10 , classified as a Divide By Zero flaw (CWE-369) . It affects Linux kernel versions from 4.17 onward and has been patched in 5.15.176, 6.1.122, 6.6.68 and others. CVE-2024-56369 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2024-56369?

CVE-2024-56369 has a CVSS score of 5.5 out of 10, rated Medium severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Is there a patch available for CVE-2024-56369?

Yes. CVE-2024-56369 has been patched. Fixed versions include 5.15.176, 6.1.122, 6.6.68 and others. If you are running Linux kernel 4.17 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2024-56369 actively exploited?

No. CVE-2024-56369 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.