CVE-2024-42102
mediumpriority · track · 19EPSS 0.003 · 17 %ileDEEURUUSEPSS · scored 2026-10-27
In the Linux kernel, the following vulnerability has been resolved: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" Patch series "mm: Avoid possible overflows in dirty throttling". Dirty throttling logic assumes dirty limits in page units fit into 32-bits. This patch series makes sure this is true (see patch 2/2 for more details). This patch (of 2): This reverts commit 9319b647902cbd5cc884ac08a8a6d54ce111fc78. The commit is broken in several ways. Firstly, the removed (u64) cast from the multiplication will introduce a multiplication overflow on 32-bit archs if wb_thresh * bg_thresh >= 1<<32 (which is actually common - the default settings with 4GB of RAM will trigger this). Secondly, the div64_u64() is unnecessarily expensive on 32-bit archs. We have div64_ul() in case we want to be safe & cheap. Thirdly, if dirty thresholds are larger than 1<<32 pages, then dirty balancing is going to blow up in many other spectacular ways anyway so trying to fix one possible overflow is just moot.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedRUGGEDCOM RST2428P (6GK6242-6PA00)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XCM-/XRM-/XCH-/XRH-300 familysiemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedRUGGEDCOM RST2428P (6GK6242-6PA00)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XCM-/XRM-/XCH-/XRH-300 familycisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · none–medium · 0–4.7
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (90)
Products and version ranges known to be affected.
- Dell PowerProtect Data Domain Management Centerall versionscert_bundDEcpe:/a:dell:powerprotect_data_domain_management_center:-
- NetApp ActiveIQ Unified Manager for VMware vSphereall versionscert_bundDEcpe:/a:netapp:active_iq_unified_manager:for_vmware_vsphere
advisories (4)
Vendor and ecosystem advisories describing this.
- SSA-613116SSA-613116: Multiple Vulnerabilities in Third-Party Components in SINEC OS before V3.12025-08-12csaf · siemens_psirtDE
SINEC OS before V3.1 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
- WID-SEC-W-2024-1722Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten AngriffDeutsch2024-07-29csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.
- WID-SEC-W-2025-1293IBM DataPower Gateway: Mehrere SchwachstellenDeutsch2025-06-10csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM DataPower Gateway ausnutzen, um seine Privilegien zu erhöhen, Informationen auszuspähen, einen Denial-of-Service auszulösen oder weitere unspezifizierte Auswirkungen zu erzielen.
- ICSA-25-226-15Siemens SINEC OS2025-08-12icsa · cisa_csaf_otUS
SINEC OS before V3.1 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (26)
External citations — patches, advisories, analysis.
- https://cxsecurity.com/cveshow/CVE-2024-42102/cnnvd
- https://git.kernel.org/stable/c/000099d71648504fb9c7a4616f92c2b70c3e44eccnnvd
- https://git.kernel.org/stable/c/145faa3d03688cbb7bbaaecbd84c01539852942ccnnvd
- https://git.kernel.org/stable/c/23a28f5f3f6ca1e4184bd0e9631cd0944cf1c807cnnvd
- https://git.kernel.org/stable/c/253f9ea7e8e53a5176bd80ceb174907b10724c1acnnvd
- https://git.kernel.org/stable/c/2820005edae13b140f2d54267d1bd6bb23915f59cnnvd
- https://git.kernel.org/stable/c/30139c702048f1097342a31302cbd3d478f50c63cnnvd
- https://git.kernel.org/stable/c/cbbe17a324437c0ff99881a3ee453da45b228a00cnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan