Orta CVSS 5.5
CVE-2024-49977: Linux Kernel: güvenlik açığı
Açıklama (NVD)
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Fix zero-division error when disabling tc cbs The commit b8c43360f6e4 ("net: stmmac: No need to calculate speed divider when offload is disabled") allows the "port_transmit_rate_kbps" to be set to a value of 0, which is then passed to the "div_s64" function when tc-cbs is disabled. This leads to a zero-division error. When tc-cbs is disabled, the idleslope, sendslope, and credit values the credit values are not required to be configured. Therefore, adding a return statement after setting the txQ mode to DCB when tc-cbs is disabled would prevent a zero-division error.
Özet bilgiler
- Ürün
- Linux Linux Kernel
- CVSS v3.1
- 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,25 (yüzdelik 16)
- CWE
- CWE-369
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| linux-linux-kernel | 5.10.221 | — | 5.10.227 |
| linux-linux-kernel | 5.15.162 | — | 5.15.168 |
| linux-linux-kernel | 6.1.96 | — | 6.1.113 |
| linux-linux-kernel | 6.6.36 | — | 6.6.55 |
| linux-linux-kernel | 6.9.7 | — | 6.10 |
| linux-linux-kernel | 6.10 | — | 6.10.14 |
| linux-linux-kernel | 6.11 | — | 6.11.3 |