In the Linux kernel, the following vulnerability has been resolved:
USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
The isd200 sub-driver in usb-storage uses the HEADS and SECTORS values in the ATA ID information to calculate cylinder and head values when creating a CDB for READ or WRITE commands. The calculation involves division and modulus operations, which will cause a crash if either of these values is 0. While this never happens with a genuine device, it could happen with a flawed or subversive emulation, as reported by the syzbot fuzzer.
Protect against this possibility by refusing to bind to the device if either the ATA_ID_HEADS or ATA_ID_SECTORS value in the device's ID information is 0. This requires isd200_Initialization() to return a negative error code when initialization fails; currently it always returns 0 (even when there is an error).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-kvmUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modulesUpgrade perfUpgrade kernel-devel | Jun 6, 2024 | May 1, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-4.14.345-262.561Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-livepatch-5.10.215-203.850Upgrade kernel-debuginfo | Aug 14, 2024 | May 1, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Jul 16, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libs | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Jul 17, 2024 | May 1, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 6, 2024 | May 1, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jun 6, 2024 | May 1, 2024 |
| Rocky_linux | — | Upgrade perf-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-rtUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-headersUpgrade kernel-rt-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade perfUpgrade kernelUpgrade kernel-rt-kvmUpgrade python3-perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-devel | Jun 17, 2024 | May 1, 2024 |
| Suse | — | Upgrade dtb-socionextUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amlogicUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-obs-qaUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-default-manUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade kernel-azure-extraUpgrade kernel-azure-vdsoUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dtb-sprdUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-defaultUpgrade dtb-amazonUpgrade kernel-default-baseUpgrade kernel-syms-rtUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-default-develUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-64kbUpgrade kernel-debug-develUpgrade kernel-rt-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-appleUpgrade kernel-docsUpgrade kernel-symsUpgrade reiserfs-kmp-64kbUpgrade dtb-renesasUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-azure-baseUpgrade kernel-debugUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade dtb-apmUpgrade dtb-amdUpgrade kernel-64kb-optionalUpgrade kernel-macrosUpgrade dtb-rockchipUpgrade ocfs2-kmp-rtUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade kernel-64kb-develUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-rt-extraUpgrade kernel-default-extraUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade dtb-caviumUpgrade kernel-rt-develUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-obs-buildUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade dtb-allwinnerUpgrade dtb-armUpgrade kernel-kvmsmallUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azure | May 15, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-ibmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1065-awsUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-intel-iotgUpgrade linux-image-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-raspi2Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1128-awsUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-intelUpgrade linux-image-oem-20.04bUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-oracleUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-oemUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-bluefieldUpgrade linux-image-azure-lts-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04 | Jul 15, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 1, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub