CVE-2024-49977: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Fix zero-division error when disabling tc cbs The commit b8c43360f6e4 ("net: stmmac: No need to calculate speed divider when offload is disabled") allows the "port_transmit_rate_kbps" to be set to a value of 0, which is then passed to the "div_s64" function when tc-cbs is disabled. This leads to a zero-division error. When tc-cbs is disabled, the idleslope, sendslope, and credit values the credit values are not required to be configured. Therefore, adding a return statement after setting the txQ mode to DCB when tc-cbs is disabled would prevent a zero-division error.

Affected products

• Linux Linux Kernel: from 5.10.221, before 5.10.227 (fixed in 5.10.227); from 5.15.162, before 5.15.168 (fixed in 5.15.168); from 6.1.96, before 6.1.113 (fixed in 6.1.113); from 6.6.36, before 6.6.55 (fixed in 6.6.55); from 6.9.7, before 6.10 (fixed in 6.10); from 6.10, before 6.10.14 (fixed in 6.10.14); …

Published 2024-10-21. Last modified 2026-06-17.