NetSight
IP …
high7.1

CVE-2020-9383

An issue was discovered in the Linux kernel 3.16 through 5.5.6.

Impact

An issue was discovered in the Linux kernel 3.16 through 5.5.6. set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC index is not checked for errors before assigning it, aka CID-2e90ca68b0d2.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.16 through 5.5.6
DebianDebian Linux
Versions 8.0, 9.0
OpensuseLeap
Version 15.1
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 19.10
NetappActive Iq Unified Manager
All versions
NetappCloud Backup
All versions
NetappData Availability Services
All versions
NetappHci Management Node
All versions
NetappSolidfire
All versions
NetappSteelstore Cloud Integrated Storage
All versions
NetappSolidfire Baseboard Management Controller Firmware
All versions
NetappH410c Firmware
All versions

Weakness classification

CWE-125

References