PT-2024-30751
CVE-2024-43893
·
تاريخ النشر
2024-07-31
·
تاريخ التحديث
2026-10-19
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue arises when calling ioctl TIOCSSERIAL with an invalid baud base, resulting in uartclk being zero. This leads to a divide by zero error in uart get divisor(). To prevent this, the check for uartclk being zero in uart set info() needs to be done before other settings are made. The vulnerability can be exploited through the
ioctl function, specifically the TIOCSSERIAL command, which can cause a divide by zero error in the uart get divisor() function.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾