Fluid Attacks Database

Description

A division by zero error was found in the BFQ I/O scheduler. When the weighted sum of I/O priorities becomes zero, the limit calculation divides by zero, causing a kernel crash.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 12	linux	=6.1.27-1 \|\| >=0 <6.1.37-1	6.1.37-1
debian 13	linux	>=0 <6.3.7-1	6.3.7-1
debian 14	linux	>=0 <6.3.7-1	6.3.7-1
rpm rhel8	kernel	-	-
rpm rhel9	kernel	<0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
rpm rhel8	kernel-rt	-	-
rpm rhel9	kernel-rt	-	-

Aliases

1. CVE-2023-542422. NVD-2023-542423. OSV-DEBIAN-2023-542424. OSV-2023-542425. SECURITY-TRACKER-CVE-2023-54242

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.