Medium 5.5Published May 19, 2024

CVE-2024-35925block: prevent division by zero in blk_rq_stat_sum()

Updated under an hour ago (Oct 26, 2026, 9:00 PM ET)

Does this affect you?

It affects Linux and 6 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: block: prevent division by zero in blk_rq_stat_sum() The expression dst->nr_samples + src->nr_samples may have zero value on overflow. It is necessary to add a check to avoid division by zero. Found by Linux Verification Center (linuxtesting.org) with Svace.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from eca8b53a6769e60d6d8240d71202d73b0af81901 before 6a55dab4ac956deb23690eedd74e70b892a378e7; from eca8b53a6769e60d6d8240d71202d73b0af81901 before edd073c78d2bf48c5b8bf435bbc3d61d6e7c6c14; from eca8b53a6769e60d6d8240d71202d73b0af81901 before b0cb5564c3e8e0ee0a2d28c86fa7f02e82d64c3c; from eca8b53a6769e60d6d8240d71202d73b0af81901 before 21e7d72d0cfcbae6042d498ea2e6f395311767f8; from eca8b53a6769e60d6d8240d71202d73b0af81901 before 512a01da7134bac8f8b373506011e8aaa3283854; from eca8b53a6769e60d6d8240d71202d73b0af81901 before 5f7fd6aa4c4877d77133ea86c14cf256f390b2fe; from eca8b53a6769e60d6d8240d71202d73b0af81901 before 98ddf2604ade2d954bf5ec193600d5274a43fd68; from eca8b53a6769e60d6d8240d71202d73b0af81901 before 93f52fbeaf4b676b21acfe42a5152620e6770d02	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
linux linux_kernel linux:linux_kernel	before 4.19.312; from 4.20 before 5.4.274; from 5.5 before 5.10.215; from 5.11 before 5.15.155; from 5.16 before 6.1.86; from 6.2 before 6.6.27; from 6.7 before 6.8.6	NVD
debian debian_linux debian:debian_linux	10.0	NVD

References

References

https://git.kernel.org/stable/c/6a55dab4ac956deb23690eedd74e70b892a378e7	patch
https://git.kernel.org/stable/c/edd073c78d2bf48c5b8bf435bbc3d61d6e7c6c14	patch
https://git.kernel.org/stable/c/b0cb5564c3e8e0ee0a2d28c86fa7f02e82d64c3c	patch
https://git.kernel.org/stable/c/21e7d72d0cfcbae6042d498ea2e6f395311767f8	patch
https://git.kernel.org/stable/c/512a01da7134bac8f8b373506011e8aaa3283854	patch
https://git.kernel.org/stable/c/5f7fd6aa4c4877d77133ea86c14cf256f390b2fe	patch
https://git.kernel.org/stable/c/98ddf2604ade2d954bf5ec193600d5274a43fd68	patch
https://git.kernel.org/stable/c/93f52fbeaf4b676b21acfe42a5152620e6770d02	patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html	mailing-list
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html	mailing-list
1–10 of 12

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.