Medium 5.5Published Oct 21, 2024

CVE-2024-49977net: stmmac: Fix zero-division error when disabling tc cbs

Updated under an hour ago (Oct 27, 2026, 3:50 AM ET)

Does this affect you?

It affects Linux and 5 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Fix zero-division error when disabling tc cbs The commit b8c43360f6e4 ("net: stmmac: No need to calculate speed divider when offload is disabled") allows the "port_transmit_rate_kbps" to be set to a value of 0, which is then passed to the "div_s64" function when tc-cbs is disabled. This leads to a zero-division error. When tc-cbs is disabled, the idleslope, sendslope, and credit values the credit values are not required to be configured. Therefore, adding a return statement after setting the txQ mode to DCB when tc-cbs is disabled would prevent a zero-division error.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from b4bca4722fda928810d024350493990de39f1e40 before e33fe25b1efe4f2e6a5858786dbc82ae4c44ed4c; from 2145583e5995598f50d66f8710c86bb1e910ac46 before b0da9504a528f05f97d926b4db74ff21917a33e9; 521d42a1c24d638241220d4b9fa7e7a0ed02b88e builds before 5d43e1ad4567d67af2b42d3ab7c14152ffed25c6; from a71b686418ee6bcb6d6365f7f6d838d9874d9c64 before 03582f4752427f60817d896f1a827aff772bd31e; from b8c43360f6e424131fa81d3ba8792ad8ff25a09e before e297a2bf56d12fd7f91a0c209eb6ea84361f3368; from b8c43360f6e424131fa81d3ba8792ad8ff25a09e before 837d9df9c0792902710149d1a5e0991520af0f93; from b8c43360f6e424131fa81d3ba8792ad8ff25a09e before 675faf5a14c14a2be0b870db30a70764df81e2df; f01782804147a8c21f481b3342c83422c041d2c0; and 5 more ranges	CNA record
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
Siemens RUGGEDCOM RST2428P siemens:ruggedcom_rst2428p (from the name)	before V3.2	CISA ADP
Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family siemens:scalance_xc_300_xr_300_xc_400_xr_500wg_xr_500_family (from the name)	before V3.2	CISA ADP
Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family siemens:scalance_xcm_xrm_xch_xrh_300_family (from the name)	before V3.2	CISA ADP
linux linux_kernel linux:linux_kernel	from 5.10.221 before 5.10.227; from 5.15.162 before 5.15.168; from 6.1.96 before 6.1.113; from 6.6.36 before 6.6.55; from 6.9.7 before 6.10; from 6.10 before 6.10.14; from 6.11 before 6.11.3	NVD

References

References

https://git.kernel.org/stable/c/e33fe25b1efe4f2e6a5858786dbc82ae4c44ed4c	patch
https://git.kernel.org/stable/c/b0da9504a528f05f97d926b4db74ff21917a33e9	patch
https://git.kernel.org/stable/c/5d43e1ad4567d67af2b42d3ab7c14152ffed25c6	patch
https://git.kernel.org/stable/c/03582f4752427f60817d896f1a827aff772bd31e	patch
https://git.kernel.org/stable/c/e297a2bf56d12fd7f91a0c209eb6ea84361f3368	patch
https://git.kernel.org/stable/c/837d9df9c0792902710149d1a5e0991520af0f93	patch
https://git.kernel.org/stable/c/675faf5a14c14a2be0b870db30a70764df81e2df	patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
https://cert-portal.siemens.com/productcert/html/ssa-265688.html
1–10 of 11

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.