CWE Code: 369
Vulnerability Type: privilege_escalation
CVSS Score: 2.1
CWE Name:  Divide By Zero
Summary: in the linux kernel before 5.2.3, drivers/block/floppy.c allows a denial of service by setup_format_params division-by-zero. two consecutive ioctls can trigger the bug: the first one should set the drive geometry with .sect and .rate values that make f_sect_per_track be zero. next, the floppy format operation should be called. it can be triggered by an unprivileged local user even when a floppy disk has not been inserted. note: qemu creates the floppy device by default.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): NONE/NONE/PARTIAL
Published Date: 2019-07-26
Last Modified Date: 2019-08-11