Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2023-31085

Опубликовано: 18 апр. 2023
Источник: redhat
CVSS3: 5.5
EPSS Низкий

Описание

An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error in do_div(sz,mtd->erasesize), used indirectly by ctrl_cdev_ioctl, when mtd->erasesize is 0.

A divide-by-zero flaw was found in the Linux kernel’s UBI (a software layer above the MTD layer that admits the use of LVM-like logical volumes on top of MTD devices). This flaw allows a local user to crash the system.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6kernelNot affected
Red Hat Enterprise Linux 7kernelOut of support scope
Red Hat Enterprise Linux 7kernel-rtOut of support scope
Red Hat Enterprise Linux 8kernelWill not fix
Red Hat Enterprise Linux 8kernel-rtWill not fix
Red Hat Enterprise Linux 9kernelWill not fix
Red Hat Enterprise Linux 9kernel-rtWill not fix

Показывать по

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=2213149kernel: divide-by-zero error in ctrl_cdev_ioctl when do_div happens and erasesize is 0

EPSS

Процентиль: 1%
0.00012
Низкий

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 2 лет назад

An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error in do_div(sz,mtd->erasesize), used indirectly by ctrl_cdev_ioctl, when mtd->erasesize is 0.

CVSS3: 5.5
nvd
около 2 лет назад

An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error in do_div(sz,mtd->erasesize), used indirectly by ctrl_cdev_ioctl, when mtd->erasesize is 0.

CVSS3: 5.5
debian
около 2 лет назад

An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel ...

CVSS3: 5.5
github
около 2 лет назад

An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error in do_div(sz,mtd->erasesize), used indirectly by ctrl_cdev_ioctl, when mtd->erasesize is 0.

CVSS3: 5.5
fstec
около 2 лет назад

Уязвимость функции mtd_div_by_eb() в модуле include/linux/mtd/mtd.h ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании или, возможно, оказать иное воздействие

EPSS

Процентиль: 1%
0.00012
Низкий

5.5 Medium

CVSS3