In the Linux kernel before 5.2.3, drivers/block/floppy.c allows a denial of service by setup_format_params division-by-zero. Two consecutive ioctls can trigger the bug: the first one should set the drive geometry with .sect and .rate values that make F_SECT_PER_TRACK be zero. Next, the floppy format operation should be called. It can be triggered by an unprivileged local user even when a floppy disk has not been inserted. NOTE: QEMU creates the floppy device by default.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Aug 14, 2019 | Jul 26, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-devel | Dec 4, 2019 | Jul 26, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo | Nov 19, 2019 | Jul 26, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel | Sep 12, 2019 | Jul 26, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade python-perfUpgrade python3-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-source | Mar 24, 2020 | Jul 26, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 21, 2019 | Jul 26, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 26, 2019 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-ec2Upgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-ec2-develUpgrade kernel-devel-azure | Aug 8, 2019 | Jul 26, 2019 |
| Ubuntu | — | Upgrade linux-image-5.0.0-1015-gcpUpgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-5.0.0-27-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1056-azureUpgrade linux-image-4.4.0-161-powerpc-smpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.0.0-1015-gkeUpgrade linux-image-awsUpgrade linux-image-4.4.0-1120-raspi2Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-4.4.0-161-powerpc-e500mcUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-4.15.0-60-genericUpgrade linux-image-4.4.0-1092-awsUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-gke-4.15Upgrade linux-image-5.0.0-1018-azureUpgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-4.4.0-161-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-gke-5.0Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-161-powerpc64-embUpgrade linux-image-4.4.0-161-genericUpgrade linux-image-genericUpgrade linux-image-5.0.0-1015-kvmUpgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-161-generic-lpaeUpgrade linux-image-5.0.0-27-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.0.0-1019-snapdragonUpgrade linux-image-5.0.0-27-generic-lpaeUpgrade linux-image-5.0.0-1014-awsUpgrade linux-image-oemUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-1124-snapdragonUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-azureUpgrade linux-image-5.0.0-1015-raspi2Upgrade linux-image-4.4.0-1056-kvmUpgrade linux-image-4.4.0-161-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-gkeUpgrade linux-image-snapdragonUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-lowlatency-hwe-16.04 | Sep 3, 2019 | Jul 26, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 26, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub