In the Linux kernel, the following vulnerability has been resolved:
mm: avoid overflows in dirty throttling logic
The dirty throttling logic is interspersed with assumptions that dirty limits in PAGE_SIZE units fit into 32-bit (so that various multiplications fit into 64-bits). If limits end up being larger, we will hit overflows, possible divisions by 0 etc. Fix these problems by never allowing so large dirty limits as they have dubious practical value anyway. For dirty_bytes / dirty_background_bytes interfaces we can just refuse to set so large limits. For dirty_ratio / dirty_background_ratio it isn't so simple as the dirty limit is computed from the amount of available memory which can change due to memory hotplug etc. So when converting dirty limits from ratios to numbers of pages, we just don't allow the result to exceed UINT_MAX.
This is root-only triggerable problem which occurs when the operator sets dirty limits to >16 TB.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-develUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-debug-modules-coreUpgrade perfUpgrade rvUpgrade kernel-64k-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-docUpgrade kernel-rtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-develUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-64k-debug-develUpgrade kernel-64k-debugUpgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-develUpgrade rtlaUpgrade kernel-64k-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-modulesUpgrade kernel-64k-coreUpgrade kernel-64k-debug-coreUpgrade kernel-64kUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-zfcpdumpUpgrade kernel-64k-modulesUpgrade libperfUpgrade kernel-debug-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modulesUpgrade kernel-coreUpgrade kernel-debug-devel | Sep 26, 2024 | Jul 30, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.10.223-211.872Upgrade kernel-toolsUpgrade perfUpgrade kernel-livepatch-4.14.353-270.569Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.164-108.161Upgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.102-108.177Upgrade kernel-tools-develUpgrade perfUpgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-modules-extra-common | Oct 16, 2025 | Jul 30, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Aug 7, 2024 | Jul 30, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Nov 11, 2024 | Jul 30, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perf | Oct 9, 2024 | Jul 30, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Nov 5, 2024 | Jul 30, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Nov 11, 2024 | Jul 30, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 30, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 6, 2024 | Jul 30, 2024 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernelUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-toolsUpgrade libperf-debuginfoUpgrade kernel-rt-kvmUpgrade python3-perfUpgrade kernel-cross-headersUpgrade rvUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade perfUpgrade libperfUpgrade kernel-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debug-uki-virtUpgrade rtlaUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-rt-modules-core | Sep 17, 2024 | Jul 30, 2024 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-64kb-develUpgrade kernel-azureUpgrade dtb-broadcomUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade kernel-devel-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-default-baseUpgrade kernel-debugUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-rtUpgrade kernel-default-optionalUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade dlm-kmp-azureUpgrade dtb-hisiliconUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade cluster-md-kmp-64kbUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade kernel-source-vanillaUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade dtb-amdUpgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dtb-exynosUpgrade kernel-kvmsmall-vdsoUpgrade dtb-rockchipUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-sourceUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-lgUpgrade kernel-default-manUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade kernel-syms-rtUpgrade dtb-qcomUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade kernel-source-azureUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-default-vdsoUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-default-develUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade dtb-alteraUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-rt-extraUpgrade dtb-armUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-devel | Dec 5, 2025 | Sep 12, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oem-20.04dUpgrade linux-image-virtualUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-oemUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-oem-20.04Upgrade linux-image-raspi2Upgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-200-genericUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-oem-22.04dUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1135-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-osp1Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1072-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-5.4.0-1139-azureUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-bluefieldUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-azure-cvmUpgrade linux-image-gkeop-6.8Upgrade linux-image-raspi-nolpae | Sep 16, 2024 | Jul 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub