CVE-2024-26774: ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt
In the Linux kernel, the following vulnerability has been resolved:
ext4: avoid dividing by 0 in mbupdateavgfragmentsize() when block bitmap corrupt
Determine if bbfragments is 0 instead of determining bbfree to eliminate the risk of dividing by zero when the block bitmap is corrupted.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
ext4: avoid dividing by 0 in mbupdateavgfragmentsize() when block bitmap corrupt
The Linux kernel CVE team has assigned CVE-2024-26774 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024040308-CVE-2024-26774-52d9@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26774?
The severity of CVE-2024-26774 is classified as medium due to the potential risk of system instability.
How do I fix CVE-2024-26774?
You can fix CVE-2024-26774 by updating your kernel to one of the affected versions such as 5.15.150, 6.1.80, or higher.
What affects CVE-2024-26774?
CVE-2024-26774 affects various versions of the Linux kernel, particularly those from Red Hat and Debian.
Is CVE-2024-26774 exploitable remotely?
CVE-2024-26774 is not considered remotely exploitable as it primarily requires local access to the affected system.
When was CVE-2024-26774 disclosed?
CVE-2024-26774 was disclosed in early April 2024.