{"cve":"CVE-2023-53783","nvd":{"published":"2025-12-09T01:16:49.547","modified":"2026-06-17T06:46:03.993","status":"Deferred","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nblk-iocost: fix divide by 0 error in calc_lcoefs()\n\necho max of u64 to cost.model can cause divide by 0 error.\n\n  # echo 8:0 rbps=18446744073709551615 > /sys/fs/cgroup/io.cost.model\n\n  divide error: 0000 [#1] PREEMPT SMP\n  RIP: 0010:calc_lcoefs+0x4c/0xc0\n  Call Trace:\n   <TASK>\n   ioc_refresh_params+0x2b3/0x4f0\n   ioc_cost_model_write+0x3cb/0x4c0\n   ? _copy_from_iter+0x6d/0x6c0\n   ? kernfs_fop_write_iter+0xfc/0x270\n   cgroup_file_write+0xa0/0x200\n   kernfs_fop_write_iter+0x17d/0x270\n   vfs_write+0x414/0x620\n   ksys_write+0x73/0x160\n   __x64_sys_write+0x1e/0x30\n   do_syscall_64+0x35/0x80\n   entry_SYSCALL_64_after_hwframe+0x63/0xcd\n\ncalc_lcoefs() uses the input value of cost.model in DIV_ROUND_UP_ULL,\noverflow would happen if bps plus IOC_PAGE_SIZE is greater than\nULLONG_MAX, it can cause divide by 0 error.\n\nFix the problem by setting basecost","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/3538ade9d8c2ba41088e395de916f2599fadba8f","https://git.kernel.org/stable/c/6e291810fe83a384700eb24a1f714966391ed562","https://git.kernel.org/stable/c/984af1e66b4126cf145153661cc24c213e2ec231","https://git.kernel.org/stable/c/9e8bf9f95f7a299fa9ea45b678d001806ad5e12c","https://git.kernel.org/stable/c/b96d7b4a9745fbd0c8384608ceb1f50415e862fa"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:16:40.427100871+00:00"},"epss":{"cve":"CVE-2023-53783","score":0.00205,"percentile":0.10495,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}