In the Linux kernel before 5.2.3, drivers/block/floppy.c allows a denial of service by setup_format_params division-by-zero. Two consecutive ioctls can trigger the bug: the first one should set the drive geometry with .sect and .rate values that make F_SECT_PER_TRACK be zero. Next, the floppy format operation should be called. It can be triggered by an unprivileged local user even when a floppy disk has not been inserted. NOTE: QEMU creates the floppy device by default.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Aug 14, 2019 | Jul 26, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debug-develUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debug | Dec 4, 2019 | Jul 26, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perf | Nov 19, 2019 | Jul 26, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernel | Sep 12, 2019 | Jul 26, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-libsUpgrade python3-perfUpgrade python-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-develUpgrade kernel-tools | Mar 24, 2020 | Jul 26, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 21, 2019 | Jul 26, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 26, 2019 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-ec2-develUpgrade kernel-devel-azureUpgrade kernel-azure-baseUpgrade kernel-ec2Upgrade kernel-obs-build | Aug 8, 2019 | Jul 26, 2019 |
| Ubuntu | — | Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-60-genericUpgrade linux-image-gke-4.15Upgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-4.4.0-161-powerpc-e500mcUpgrade linux-image-5.0.0-1015-gkeUpgrade linux-image-5.0.0-1018-azureUpgrade linux-image-4.4.0-161-powerpc64-embUpgrade linux-image-5.0.0-1015-gcpUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-4.4.0-1120-raspi2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-5.0.0-27-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1092-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gke-5.0Upgrade linux-image-4.15.0-1056-azureUpgrade linux-image-4.4.0-161-lowlatencyUpgrade linux-image-4.4.0-161-powerpc-smpUpgrade linux-image-5.0.0-27-generic-lpaeUpgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-161-genericUpgrade linux-image-4.4.0-161-powerpc64-smpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.0.0-1014-awsUpgrade linux-image-5.0.0-27-genericUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-oemUpgrade linux-image-4.4.0-1056-kvmUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.0.0-1019-snapdragonUpgrade linux-image-gkeUpgrade linux-image-5.0.0-1015-kvmUpgrade linux-image-azureUpgrade linux-image-snapdragonUpgrade linux-image-5.0.0-1015-raspi2Upgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-4.4.0-161-generic-lpaeUpgrade linux-image-4.4.0-1124-snapdragonUpgrade linux-image-snapdragon-hwe-18.04 | Sep 3, 2019 | Jul 26, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 26, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub