CVE-2024-26774: ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt

Description

In the Linux kernel, the following vulnerability has been resolved:

ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt

Determine if bb_fragments is 0 instead of determining bb_free to eliminate
the risk of dividing by zero when the block bitmap is corrupted.

Classification

CVE ID: CVE-2024-26774

Affected Products

Vendor: Linux

Product: Linux

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.05% (probability of being exploited)

EPSS Percentile: 17.83% (scored less or equal to compared to others)

EPSS Date: 2025-02-04 (when was this score calculated)

References

https://git.kernel.org/stable/c/687061cfaa2ac3095170e136dd9c29a4974f41d4
https://git.kernel.org/stable/c/8b40eb2e716b503f7a4e1090815a17b1341b2150
https://git.kernel.org/stable/c/f32d2a745b02123258026e105a008f474f896d6a
https://git.kernel.org/stable/c/8cf9cc602cfb40085967c0d140e32691c8b71cf3
https://git.kernel.org/stable/c/993bf0f4c393b3667830918f9247438a8f6fdb5b

Timeline