In the Linux kernel, the following vulnerability has been resolved:
USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
The isd200 sub-driver in usb-storage uses the HEADS and SECTORS values in the ATA ID information to calculate cylinder and head values when creating a CDB for READ or WRITE commands. The calculation involves division and modulus operations, which will cause a crash if either of these values is 0. While this never happens with a genuine device, it could happen with a flawed or subversive emulation, as reported by the syzbot fuzzer.
Protect against this possibility by refusing to bind to the device if either the ATA_ID_HEADS or ATA_ID_SECTORS value in the device's ID information is 0. This requires isd200_Initialization() to return a negative error code when initialization fails; currently it always returns 0 (even when there is an error).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-docUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extra | Jun 6, 2024 | May 1, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.345-262.561Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-livepatch-5.10.215-203.850Upgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfo | Aug 14, 2024 | May 1, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Jul 16, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Jul 17, 2024 | May 1, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 6, 2024 | May 1, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jun 6, 2024 | May 1, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-kvmUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debug-develUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debugUpgrade kernel-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rtUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernelUpgrade bpftoolUpgrade kernel-cross-headersUpgrade perfUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade python3-perf | Jun 17, 2024 | May 1, 2024 |
| Suse | — | Upgrade kernel-azureUpgrade dlm-kmp-rtUpgrade dtb-socionextUpgrade dtb-freescaleUpgrade ocfs2-kmp-azureUpgrade dtb-broadcomUpgrade kernel-rt_debug-develUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-rt_debugUpgrade dtb-amdUpgrade kernel-rt-vdsoUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade kernel-default-develUpgrade dlm-kmp-azureUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-optionalUpgrade dtb-apmUpgrade dtb-marvellUpgrade kernel-source-rtUpgrade dtb-sprdUpgrade dtb-appleUpgrade kernel-default-baseUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade kernel-docsUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-default-manUpgrade dtb-hisiliconUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-amazonUpgrade reiserfs-kmp-rtUpgrade kernel-syms-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade gfs2-kmp-rtUpgrade dtb-rockchipUpgrade dtb-armUpgrade kernel-default-optionalUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade kernel-azure-livepatch-develUpgrade dtb-qcomUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-rt-extraUpgrade dtb-xilinxUpgrade kernel-devel-azureUpgrade kernel-develUpgrade dtb-exynosUpgrade dtb-mediatekUpgrade kernel-default-extraUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-default-vdsoUpgrade kernel-devel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-azure-develUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade dtb-alteraUpgrade kernel-sourceUpgrade kernel-rt-develUpgrade kernel-64kb-develUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall | May 15, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-raspi2Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-intelUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-nvidiaUpgrade linux-image-azure-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-gkeUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-virtualUpgrade linux-image-oemUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04 | Jul 15, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub