In the Linux kernel before 5.2.3, set_geometry in drivers/block/floppy.c does not validate the sect and head fields, as demonstrated by an integer overflow and out-of-bounds read. It can be triggered by an unprivileged local user when a floppy disk has been inserted. NOTE: QEMU creates the floppy device by default.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 1, 2020 | Jul 26, 2019 |
| Debian | — | Upgrade linux | Aug 14, 2019 | Jul 26, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-toolsUpgrade perf | Dec 4, 2019 | Jul 26, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-libs | Nov 19, 2019 | Jul 26, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel | Sep 12, 2019 | Jul 26, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade python3-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-source | Mar 23, 2020 | Jul 26, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 3, 2019 | Jul 26, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Apr 1, 2020 | Jul 26, 2019 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-defaultUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-ec2-extraUpgrade kernel-ec2-develUpgrade kernel-devel-azure | Aug 7, 2019 | Jul 26, 2019 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1092-awsUpgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-161-powerpc64-smpUpgrade linux-image-4.4.0-1056-kvmUpgrade linux-image-virtualUpgrade linux-image-5.0.0-27-genericUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-5.0.0-27-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-4.4.0-161-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-5.0.0-27-generic-lpaeUpgrade linux-image-4.4.0-161-lowlatencyUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-5.0.0-1014-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1056-azureUpgrade linux-image-gke-5.0Upgrade linux-image-gkeUpgrade linux-image-5.0.0-1015-kvmUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-powerpc64-smpUpgrade linux-image-5.0.0-1019-snapdragonUpgrade linux-image-4.4.0-161-powerpc-smpUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-4.4.0-161-powerpc-e500mcUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1120-raspi2Upgrade linux-image-4.15.0-60-genericUpgrade linux-image-aws-hweUpgrade linux-image-5.0.0-1015-gcpUpgrade linux-image-5.0.0-1015-raspi2Upgrade linux-image-genericUpgrade linux-image-5.0.0-1018-azureUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-5.0.0-1015-gkeUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1124-snapdragonUpgrade linux-image-oemUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-161-powerpc64-embUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-161-generic | Sep 3, 2019 | Jul 26, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 26, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub