CVE-2020-9383 PUBLISHED

An issue was discovered in the Linux kernel 3.16 through 5.5.6. set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC index is not checked for errors before assigning it, aka CID-2e90ca68b0d2.

EPSS 0.10% · 26.4th percentile

Risk Scores

EPSS Score
0.10%
26.4th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSlinux-aws4.4.0-1038.41, 4.4.0-1003.3, 4.4.0-1005.5
Ubuntu:18.04:LTSlinux-gcp4.15.0-1018.19, 4.15.0-1019.20, 4.15.0-1021.22
Ubuntu:Pro:14.04:LTSlinux3.13.0-70.113, 3.13.0-73.116, 3.13.0-74.118
Ubuntu:18.04:LTSlinux-aws-5.35.3.0-1016.17~18.04.1, 0
Ubuntu:16.04:LTSlinux-hwe-edge4.10.0-26.30~16.04.1, 4.10.0-24.28~16.04.1, 4.10.0-22.24~16.04.1
Ubuntu:Pro:FIPS:18.04:LTSlinux-azure-fips4.15.0-1002.2, 0
Ubuntu:16.04:LTSlinux-gcp4.15.0-1015.15~16.04.1, 4.15.0-1017.18~16.04.1, 4.15.0-1018.19~16.04.2
Ubuntu:18.04:LTSlinux-oracle-5.05.0.0-1008.13~18.04.1, 5.0.0-1007.12~18.04.1, 0
Ubuntu:18.04:LTSlinux-oracle4.15.0-1008.10, 4.15.0-1037.41, 4.15.0-1035.39
Ubuntu:18.04:LTSlinux-aws4.15.0-1065.69, 0, 4.15.0-1001.1
Ubuntu:16.04:LTSlinux-raspi24.4.0-1124.133, 0, 4.2.0-1013.19
Ubuntu:Pro:FIPS-updates:18.04:LTSlinux-aws-fips4.15.0-2000.4, 0
Ubuntu:Pro:14.04:LTSlinux-azure4.15.0-1037.39~14.04.2, 4.15.0-1036.38~14.04.2, 4.15.0-1035.36~14.04.2
Ubuntu:18.04:LTSlinux-hwe-edge5.3.0-22.24~18.04.1, 5.3.0-19.20~18.04.2, 5.0.0-20.21~18.04.1
Ubuntu:18.04:LTSlinux-azure-5.35.3.0-1012.13~18.04.1, 5.3.0-1010.11~18.04.1, 5.3.0-1009.10~18.04.1
Ubuntu:18.04:LTSlinux-raspi24.15.0-1055.59, 4.15.0-1053.57, 4.15.0-1041.44
Ubuntu:18.04:LTSlinux-gke-4.154.15.0-1030.32, 4.15.0-1055.58, 4.15.0-1052.55
Ubuntu:18.04:LTSlinux-oem-osp15.0.0-1047.52, 5.0.0-1046.51, 5.0.0-1043.48
Ubuntu:Pro:14.04:LTSlinux-lts-xenial4.4.0-64.85~14.04.1, 0, 4.4.0-13.29~14.04.1
Ubuntu:18.04:LTSlinux-gke-5.35.3.0-1011.12~18.04.1, 0, 5.3.0-1017.18~18.04.1

…and 34 more

Timeline

References

Open in Interactive Console →