What’s Vulnerable › Vulnerabilities

CVE-2024-56622: scsi: ufs: core: sysfs: Prevent div by zero

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-12-27 · updated 2026-06-17
• Weakness: CWE-369

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: sysfs: Prevent div by zero Prevent a division by 0 when monitoring is not enabled.

Affected products

• Linux kernel: from 5.14 before 5.15.174; from 5.16 before 6.1.120; from 6.2 before 6.6.66; from 6.7 before 6.12.5; 6.13-rc1 — fixed in 5.15.174, 6.1.120, 6.12.5, 6.6.66

How to fix

Upgrade to a fixed version: Linux kernel 5.15.174, 6.1.120, 6.12.5, 6.6.66. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0069928727c2e95ca26c738fbe6e4b241aeaaf08
• https://git.kernel.org/stable/c/7b21233e5f72d10f08310689f993c1dbdfde9f2c
• https://git.kernel.org/stable/c/87bf3ea841a5d77beae6bb85af36b2b3848407ee
• https://git.kernel.org/stable/c/9c191055c7abea4912fdb83cb9b261732b25a0c8
• https://git.kernel.org/stable/c/eb48e9fc0028bed94a40a9352d065909f19e333c
• https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html

Get alerted when CVE-2024-56622 or the next vulnerability affects your stack