5.5

CVE-2024-35925: debian debian_linux Divide By Zero

CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2024-35925DEBIAN-CVE-2024-35925
Published 19-05-2024Last modified 15-10-2026
Open JSON

Vulnerability summary

CVE-2024-35925 is a medium (CVSS 5.5) Divide By Zero vulnerability in debian debian_linux. EPSS estimates a 0.23% chance of exploitation in the next 30 days, higher than 12.6% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.23%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 34 · Related 28
DLA-3840-1DLA-3842-1RHSA-2024:5101RHSA-2024:5102RHSA-2024:9315RHSA-2025:3510

Timeline

  1. 19-05-2024
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: block: prevent division by zero in blk_rq_stat_sum() The expression dst->nr_samples + src->nr_samples may have zero value on overflow. It is necessary to add a check to avoid division by zero. Found by Linux Verification Center (linuxtesting.org) with Svace.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.23%

Chance of exploitation in the next 30 days

Percentile

13%

Versus all other CVEs

30-day change

0.00 pp

From 0.23% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.23%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu123 products
  • linuxAll versions (No fix recorded) | < 5.4.0-189.209 | < 5.15.0-116.126 | < 6.8.0-38.38
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.4.0-1128.138 | < 5.15.0-1065.71 | < 6.8.0-1011.12
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
Linux2 products
  • linux≥ eca8b53a6769e60d6d8240d71202d73b0af81901, < 6a55dab4ac956deb23690eedd74e70b892a378e7 | ≥ eca8b53a6769e60d6d8240d71202d73b0af81901, < edd073c78d2bf48c5b8bf435bbc3d61d6e7c6c14 | ≥ eca8b53a6769e60d6d8240d71202d73b0af81901, < b0cb5564c3e8e0ee0a2d28c86fa7f02e82d64c3c | ≥ eca8b53a6769e60d6d8240d71202d73b0af81901, < 21e7d72d0cfcbae6042d498ea2e6f395311767f8 | ≥ eca8b53a6769e60d6d8240d71202d73b0af81901, < 512a01da7134bac8f8b373506011e8aaa3283854 | ≥ eca8b53a6769e60d6d8240d71202d73b0af81901, < 5f7fd6aa4c4877d77133ea86c14cf256f390b2fe | ≥ eca8b53a6769e60d6d8240d71202d73b0af81901, < 98ddf2604ade2d954bf5ec193600d5274a43fd68 | ≥ eca8b53a6769e60d6d8240d71202d73b0af81901, < 93f52fbeaf4b676b21acfe42a5152620e6770d02 | 4.15
  • linux_kernel< 4.19.312 | ≥ 4.20, < 5.4.274 | ≥ 5.5, < 5.10.215 | ≥ 5.11, < 5.15.155 | ≥ 5.16, < 6.1.86 | ≥ 6.2, < 6.6.27 | ≥ 6.7, < 6.8.6

3 vendors · 127 products

References

33 links
Show all 33 references