CVE-2023-31085CWE-369

CVE-2023-31085

Medium · published April 24, 2023

CVSS v3.1
5.5
EPSS
0%
Percentile
30.8
In the wild
Unconfirmed
What it is

An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error in do_div(sz,mtd->erasesize), used indirectly by ctrl_cdev_ioctl, when mtd->erasesize is 0.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00381 · 30.8th percentile
Weakness
CWE-369 · Divide By Zero
Published
2023-04-24T10:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernelall versions—
References (9)
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=017c73a34a661a861712f7cc1393a123e5b2208c · [email protected]https://lore.kernel.org/all/687864524.118195.1681799447034.JavaMail.zimbra%40nod.at/ · [email protected]https://security.netapp.com/advisory/ntap-20230929-0003/ · [email protected]https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=017c73a34a661a861712f7cc1393a123e5b2208c · af854a3a-2127-422b-91ae-364da2661108https://lore.kernel.org/all/687864524.118195.1681799447034.JavaMail.zimbra%40nod.at/ · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20230929-0003/ · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-398330.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-769027.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-794697.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 24 APR 00:00Z
    An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2
    cvelistv5