In the Linux kernel before 5.2.3, set_geometry in drivers/block/floppy.c does not validate the sect and head fields, as demonstrated by an integer overflow and out-of-bounds read. It can be triggered by an unprivileged local user when a floppy disk has been inserted. NOTE: QEMU creates the floppy device by default.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 1, 2020 | Jul 26, 2019 |
| Debian | — | Upgrade linux | Aug 14, 2019 | Jul 26, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debugUpgrade kernel-develUpgrade perfUpgrade kernel-tools | Dec 4, 2019 | Jul 26, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade python-perf | Nov 19, 2019 | Jul 26, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade perf | Sep 12, 2019 | Jul 26, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-sourceUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftool | Mar 23, 2020 | Jul 26, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 3, 2019 | Jul 26, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Apr 1, 2020 | Jul 26, 2019 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-ec2-extraUpgrade kernel-default-manUpgrade kernel-default-extra | Aug 7, 2019 | Jul 26, 2019 |
| Ubuntu | — | Upgrade linux-image-5.0.0-27-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-gcpUpgrade linux-image-4.4.0-1092-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc64-embUpgrade linux-image-5.0.0-27-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1056-azureUpgrade linux-image-5.0.0-1014-awsUpgrade linux-image-4.4.0-161-powerpc64-smpUpgrade linux-image-oracleUpgrade linux-image-5.0.0-1015-kvmUpgrade linux-image-gke-5.0Upgrade linux-image-5.0.0-27-generic-lpaeUpgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-awsUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-gkeUpgrade linux-image-4.4.0-161-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.4.0-161-generic-lpaeUpgrade linux-image-4.4.0-1056-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-5.0.0-1015-gcpUpgrade linux-image-4.4.0-161-powerpc-smpUpgrade linux-image-5.0.0-1019-snapdragonUpgrade linux-image-genericUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-5.0.0-1015-gkeUpgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-4.4.0-161-genericUpgrade linux-image-4.4.0-1124-snapdragonUpgrade linux-image-5.0.0-1018-azureUpgrade linux-image-5.0.0-1015-raspi2Upgrade linux-image-4.4.0-161-powerpc-e500mcUpgrade linux-image-powerpc64-smpUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1120-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-60-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-snapdragonUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-161-powerpc64-embUpgrade linux-image-azure | Sep 3, 2019 | Jul 26, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 26, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub