Medium severity · published Oct 21, 2024
CVE-2024-49977
net: stmmac: Fix zero-division error when disabling tc cbs
5.5
CVSS
0.2%
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Fix zero-division error when disabling tc cbs The commit b8c43360f6e4 ("net: stmmac: No need to calculate speed divider when offload is disabled") allows the "port_transmit_rate_kbps" to be set to a value of 0, which is then passed to the "div_s64" function when tc-cbs is disabled. This leads to a zero-division error. When tc-cbs is disabled, the idleslope, sendslope, and credit values the credit values are not required to be configured. Therefore, adding a return statement after setting the txQ mode to DCB when tc-cbs is disabled would prevent a zero-division error.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 16% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
5.10.221 before 5.10.227; 5.15.162 before 5.15.168; 6.1.96 before 6.1.113; 6.6.36 before 6.6.55; 6.9.7 before 6.10; 6.10 before 6.10.14; +1 more · source: NVD
LI
Linux · Linux
b4bca4722fda928810d024350493990de39f1e40 before e33fe25b1efe4f2e6a5858786dbc82ae4c44ed4c; 2145583e5995598f50d66f8710c86bb1e910ac46 before b0da9504a528f05f97d926b4db74ff21917a33e9; 521d42a1c24d638241220d4b9fa7e7a0ed02b88e before 5d43e1ad4567d67af2b42d3ab7c14152ffed25c6; a71b686418ee6bcb6d6365f7f6d838d9874d9c64 before 03582f4752427f60817d896f1a827aff772bd31e; b8c43360f6e424131fa81d3ba8792ad8ff25a09e before e297a2bf56d12fd7f91a0c209eb6ea84361f3368; b8c43360f6e424131fa81d3ba8792ad8ff25a09e before 837d9df9c0792902710149d1a5e0991520af0f93; +8 more · source: vendor
RR
RUGGEDCOM RST2428P · Siemens
before V3.2 · source: CISA