Home

CVE-2019-14284

Description

In the Linux kernel before 5.2.3, drivers/block/floppy.c allows a denial of service by setup_format_params division-by-zero. Two consecutive ioctls can trigger the bug: the first one should set the drive geometry with .sect and .rate values that make F_SECT_PER_TRACK be zero. Next, the floppy format operation should be called. It can be triggered by an unprivileged local user even when a floppy disk has not been inserted. NOTE: QEMU creates the floppy device by default.

Risk Information

Base Score
6.2
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.048

Associated Vulnerability

VulnerabilityOS Platform
SUSE-SU-2019:14157-1(SUSE Linux Enterprise Server 11-EXTRA ) kernel-default-extra-3.0.101-108.101.1.i586.rpmLinux
SUSE-SU-2019:14157-1(SUSE Linux Enterprise Server 11-EXTRA ) kernel-default-extra-3.0.101-108.101.1.x86_64.rpmLinux
SUSE-SU-2019:14157-1(SUSE Linux Enterprise Server 11-EXTRA ) kernel-pae-extra-3.0.101-108.101.1.i586.rpmLinux
SUSE-SU-2019:14157-1(SUSE Linux Enterprise Server 11-EXTRA ) kernel-trace-extra-3.0.101-108.101.1.x86_64.rpmLinux
SUSE-SU-2019:14157-1(SUSE Linux Enterprise Server 11-EXTRA ) kernel-xen-extra-3.0.101-108.101.1.i586.rpmLinux
SUSE-SU-2019:14157-1(SUSE Linux Enterprise Server 11-EXTRA ) kernel-xen-extra-3.0.101-108.101.1.x86_64.rpmLinux
Linux kernel (USN-4115-1) linux-image-gcp_4.15.0.1041.55_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-gke_4.15.0.1041.44_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-gke_4.15.0.1041.55_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-kvm_4.15.0.1043.43_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-oem_4.15.0.60.81_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-azure_4.15.0.1056.59_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-oracle_4.15.0.1022.16_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-oracle_4.15.0.1022.25_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-generic_4.15.0.60.62_i386.debLinux
Linux kernel (USN-4115-1) linux-image-generic_4.15.0.60.62_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-virtual_4.15.0.60.62_i386.debLinux
Linux kernel (USN-4115-1) linux-image-virtual_4.15.0.60.62_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-gke-4.15_4.15.0.1041.44_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-lowlatency_4.15.0.60.62_i386.debLinux
Linux kernel (USN-4115-1) linux-image-lowlatency_4.15.0.60.62_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-1041-gcp_4.15.0-1041.43_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-1041-gke_4.15.0-1041.43_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-1043-kvm_4.15.0-1043.43_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-1056-azure_4.15.0-1056.61_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-60-generic_4.15.0-60.67_i386.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-60-generic_4.15.0-60.67_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-60-generic_4.15.0-60.67~16.04.1_i386.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-60-generic_4.15.0-60.67~16.04.1_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-generic-hwe-16.04_4.15.0.60.81_i386.debLinux
Linux kernel (USN-4115-1) linux-image-generic-hwe-16.04_4.15.0.60.81_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-virtual-hwe-16.04_4.15.0.60.81_i386.debLinux
Linux kernel (USN-4115-1) linux-image-virtual-hwe-16.04_4.15.0.60.81_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-1022-oracle_4.15.0-1022.25_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-1022-oracle_4.15.0-1022.25~16.04.1_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-60-lowlatency_4.15.0-60.67_i386.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-60-lowlatency_4.15.0-60.67_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-60-lowlatency_4.15.0-60.67~16.04.1_i386.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-60-lowlatency_4.15.0-60.67~16.04.1_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-lowlatency-hwe-16.04_4.15.0.60.81_i386.debLinux
Linux kernel (USN-4115-1) linux-image-lowlatency-hwe-16.04_4.15.0.60.81_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-aws_4.15.0.1047.46_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-aws-hwe_4.15.0.1047.47_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-4.15.0-1047-aws_4.15.0-1047.49_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-4.15.0-1047-aws_4.15.0-1047.49~16.04.1_amd64.debLinux
Dtrace-modules-3.8.13-118.40.1.el6uek update (ELSA-2019-4854) dtrace-modules-3.8.13-118.40.1.el6uek-0.4.5-3.el6.x86_64.rpmLinux
Dtrace-modules-3.8.13-118.40.1.el7uek update (ELSA-2019-4854) dtrace-modules-3.8.13-118.40.1.el7uek-0.4.5-3.el7.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234