716642 – sys-kernel/gentoo-sources: Unspecified vulnerability (CVE-2020-9383)

Bug 716642 - sys-kernel/gentoo-sources: Unspecified vulnerability (CVE-2020-9383)

Summary: sys-kernel/gentoo-sources: Unspecified vulnerability (CVE-2020-9383)

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Kernel (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Gentoo Security

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2020-04-08 05:18 UTC by GLSAMaker/CVETool Bot
Modified:	2021-06-12 16:08 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description GLSAMaker/CVETool Bot gentoo-dev

2020-04-08 05:18:00 UTC

CVE-2020-9383 (https://nvd.nist.gov/vuln/detail/CVE-2020-9383):
  An issue was discovered in the Linux kernel through 5.5.6. set_fdc in
  drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because
  the FDC index is not checked for errors before assigning it, aka
  CID-2e90ca68b0d2.

Comment 1 John Helmert III archtester

2021-06-12 16:08:12 UTC

Fix is in 4.4.215, 4.9.215, 4.14.172, 4.19.107, 5.4.23, 5.5.7. All long cleanup'd in Gentoo.