UBUNTU-CVE-2023-31085
Vulnerability Summary
Timeline
Description
An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error in do_div(sz,mtd->erasesize), used indirectly by ctrl_cdev_ioctl, when mtd->erasesize is 0.
CVSS Metrics
- v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Systems
- ubuntu•linux
all | < 4.4.0-248.282 | < 4.15.0-220.231 | < 5.4.0-167.184 | < 5.15.0-89.99
- ubuntu•linux-allwinner-5.19
all
- ubuntu•linux-aws
< 4.4.0-1125.131 | < 4.4.0-1163.178 | < 4.15.0-1163.176 | < 5.4.0-1114.124 | < 5.15.0-1050.55
- ubuntu•linux-aws-5.0
all
- ubuntu•linux-aws-5.11
all
- ubuntu•linux-aws-5.13
all
- ubuntu•linux-aws-5.15
< 5.15.0-1050.55~20.04.1
- ubuntu•linux-aws-5.19
all
- ubuntu•linux-aws-5.3
all
- ubuntu•linux-aws-5.4
< 5.4.0-1114.124~18.04.1
- ubuntu•linux-aws-5.8
all
- ubuntu•linux-aws-6.2
< 6.2.0-1016.16~22.04.1
- ubuntu•linux-aws-6.5
all
- ubuntu•linux-aws-fips
< 4.15.0-2102.108 | all | < 5.4.0-1114.124+fips1
- ubuntu•linux-aws-hwe
< 4.15.0-1163.176~16.04.1
- ubuntu•linux-azure
< 4.15.0-1172.187~14.04.1 | < 4.15.0-1172.187~16.04.1 | all | < 5.4.0-1120.127 | < 5.15.0-1052.60
- ubuntu•linux-azure-4.15
< 4.15.0-1172.187
- ubuntu•linux-azure-5.11
all
- ubuntu•linux-azure-5.13
all
- ubuntu•linux-azure-5.15
< 5.15.0-1052.60~20.04.1
- ubuntu•linux-azure-5.19
all
- ubuntu•linux-azure-5.3
all
- ubuntu•linux-azure-5.4
< 5.4.0-1120.127~18.04.1
- ubuntu•linux-azure-5.8
all
- ubuntu•linux-azure-6.2
< 6.2.0-1017.17~22.04.1
- ubuntu•linux-azure-6.5
all
- ubuntu•linux-azure-edge
all
- ubuntu•linux-azure-fde
all | < 5.15.0-1052.60.1 | all
- ubuntu•linux-azure-fde-5.19
all
- ubuntu•linux-azure-fde-6.2
< 6.2.0-1017.17~22.04.1.1
- ubuntu•linux-azure-fde-6.8
all
- ubuntu•linux-azure-fips
< 4.15.0-2081.87 | all | < 5.4.0-1121.128+fips1
- ubuntu•linux-bluefield
< 5.15.0-1032.34 | < 5.4.0-1075.81 | < 5.15.0-1032.34 | all
- ubuntu•linux-fips
< 4.4.0-1095.102 | all | < 4.15.0-1118.129 | < 5.4.0-1089.98
- ubuntu•linux-gcp
< 4.15.0-1157.174~16.04.1 | all | < 5.4.0-1118.127 | < 5.15.0-1047.55
- ubuntu•linux-gcp-4.15
< 4.15.0-1157.174
- ubuntu•linux-gcp-5.11
all
- ubuntu•linux-gcp-5.13
all
- ubuntu•linux-gcp-5.15
< 5.15.0-1047.55~20.04.1
- ubuntu•linux-gcp-5.19
all
- ubuntu•linux-gcp-5.3
all
- ubuntu•linux-gcp-5.4
< 5.4.0-1118.127~18.04.1
- ubuntu•linux-gcp-5.8
all
- ubuntu•linux-gcp-6.2
< 6.2.0-1019.21~22.04.1
- ubuntu•linux-gcp-fips
< 4.15.0-2065.70 | all | < 5.4.0-1118.127+fips1
- ubuntu•linux-gke
all | < 5.15.0-1047.52
- ubuntu•linux-gke-4.15
all
- ubuntu•linux-gke-5.15
all
- ubuntu•linux-gke-5.4
all
- ubuntu•linux-gkeop
< 5.4.0-1081.85 | < 5.15.0-1033.39
Showing first 50 affected entries in server-rendered view.
References (22)
- https://ubuntu.com/security/CVE-2023-31085
- https://lore.kernel.org/all/687864524.118195.1681799447034.JavaMail.zimbra@nod.at/
- https://patchwork.ozlabs.org/project/linux-mtd/patch/20230423111041.684297-1-chengzhihao1@huawei.com/
- https://lore.kernel.org/all/20230831111100.26862-1-jack@suse.cz/T/#u
- https://ubuntu.com/security/notices/USN-6461-1
- https://ubuntu.com/security/notices/USN-6494-1
- https://ubuntu.com/security/notices/USN-6495-1
- https://ubuntu.com/security/notices/USN-6496-1
- https://ubuntu.com/security/notices/USN-6502-1
- https://ubuntu.com/security/notices/USN-6503-1
- https://ubuntu.com/security/notices/USN-6516-1
- https://ubuntu.com/security/notices/USN-6502-2
- https://ubuntu.com/security/notices/USN-6502-3
- https://ubuntu.com/security/notices/USN-6520-1
- https://ubuntu.com/security/notices/USN-6494-2
- https://ubuntu.com/security/notices/USN-6495-2
- https://ubuntu.com/security/notices/USN-6496-2
- https://ubuntu.com/security/notices/USN-6502-4
- https://ubuntu.com/security/notices/USN-6532-1
- https://ubuntu.com/security/notices/USN-6537-1
- https://ubuntu.com/security/notices/USN-6572-1
- https://www.cve.org/CVERecord?id=CVE-2023-31085