Bug 716642

Summary:	sys-kernel/gentoo-sources: Unspecified vulnerability (CVE-2020-9383)
Product:	Gentoo Security	Reporter:	GLSAMaker/CVETool Bot <glsamaker>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	kernel
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description GLSAMaker/CVETool Bot gentoo-dev

2020-04-08 05:18:00 UTC

CVE-2020-9383 (https://nvd.nist.gov/vuln/detail/CVE-2020-9383):
  An issue was discovered in the Linux kernel through 5.5.6. set_fdc in
  drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because
  the FDC index is not checked for errors before assigning it, aka
  CID-2e90ca68b0d2.

Comment 1 John Helmert III archtester

2021-06-12 16:08:12 UTC

Fix is in 4.4.215, 4.9.215, 4.14.172, 4.19.107, 5.4.23, 5.5.7. All long cleanup'd in Gentoo.