cbcvebase.
CVE-2024-42131
published 2024-07-30

CVE-2024-42131: In the Linux kernel, the following vulnerability has been resolved: mm: avoid overflows in dirty throttling logic The dirty throttling logic is interspersed…

PriorityP415medium4.4CVSS 3.1
AVLACLPRHUINSUCNINAH
EPSS
0.24%
15.8th percentile
In the Linux kernel, the following vulnerability has been resolved: mm: avoid overflows in dirty throttling logic The dirty throttling logic is interspersed with assumptions that dirty limits in PAGE_SIZE units fit into 32-bit (so that various multiplications fit into 64-bits). If limits end up being larger, we will hit overflows, possible divisions by 0 etc. Fix these problems by never allowing so large dirty limits as they have dubious practical value anyway. For dirty_bytes / dirty_background_bytes interfaces we can just refuse to set so large limits. For dirty_ratio / dirty_background_ratio it isn't so simple as the dirty limit is computed from the amount of available memory which can change due to memory hotplug etc. So when converting dirty limits from ratios to numbers of pages, we just don't allow the result to exceed UINT_MAX. This is root-only triggerable problem which occurs when the operator sets dirty limits to >16 TB.

Affected

26 ranges· showing 25
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.98-1 (bookworm)linux 6.1.98-1 (bookworm)
debianlinux-6.1< linux 6.1.98-1 (bookworm)linux 6.1.98-1 (bookworm)
linuxlinux
linuxlinux>= 2da02997e08d3efe8174c7a47696e6f7cbe69ba9 < 2b2d2b8766db028bd827af34075f221ae9e9efff2b2d2b8766db028bd827af34075f221ae9e9efff
linuxlinux>= 2da02997e08d3efe8174c7a47696e6f7cbe69ba9 < 4d3817b64eda07491bdd86a234629fe0764fb42a4d3817b64eda07491bdd86a234629fe0764fb42a
linuxlinux>= 2da02997e08d3efe8174c7a47696e6f7cbe69ba9 < 7a49389771ae7666f4dc3426e2a4594bf23ae2907a49389771ae7666f4dc3426e2a4594bf23ae290
linuxlinux>= 2da02997e08d3efe8174c7a47696e6f7cbe69ba9 < a25e8536184516b55ef89ab91dd2eea429de28d2a25e8536184516b55ef89ab91dd2eea429de28d2
linuxlinux>= 2da02997e08d3efe8174c7a47696e6f7cbe69ba9 < c83ed422c24f0d4b264f89291d4fabe285f80dbcc83ed422c24f0d4b264f89291d4fabe285f80dbc
linuxlinux>= 2da02997e08d3efe8174c7a47696e6f7cbe69ba9 < bd16a7ee339aef3ee4c90cb23902afb6af379ea0bd16a7ee339aef3ee4c90cb23902afb6af379ea0
linuxlinux>= 2da02997e08d3efe8174c7a47696e6f7cbe69ba9 < 8e0b5e7f2895eccef5c2a0018b589266f90c48058e0b5e7f2895eccef5c2a0018b589266f90c4805
linuxlinux>= 2da02997e08d3efe8174c7a47696e6f7cbe69ba9 < 385d838df280eba6c8680f9777bfa0d0bfe7e8b2385d838df280eba6c8680f9777bfa0d0bfe7e8b2
linuxlinux_kernel< 4.19.3204.19.320
linuxlinux_kernel
linuxlinux_kernel>= 0 < 5.10.223-15.10.223-1
linuxlinux_kernel>= 0 < 6.1.98-16.1.98-1
linuxlinux_kernel>= 0 < 6.9.9-16.9.9-1
linuxlinux_kernel>= 0 < 6.9.9-16.9.9-1
linuxlinux_kernel>= 0 < 5.4.0-200.2205.4.0-200.220
linuxlinux_kernel>= 0 < 5.15.0-121.1315.15.0-121.131
linuxlinux_kernel>= 0 < 6.8.0-48.486.8.0-48.48
linuxlinux_kernel>= 4.20 < 5.4.2825.4.282
linuxlinux_kernel>= 5.11 < 5.15.1635.15.163
linuxlinux_kernel>= 5.16 < 6.1.986.1.98
linuxlinux_kernel>= 5.5 < 5.10.2225.10.222
linuxlinux_kernel>= 6.2 < 6.6.396.6.39

CVSS provenance

nvdv3.14.4MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_ubuntu6.3MEDIUM
vendor_debian4.4MEDIUM
vendor_redhat4.4MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.