An issue was discovered in the Linux kernel 3.16 through 5.5.6. set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC index is not checked for errors before assigning it aka CID-2e90ca68b0d2.

🗓️ 18 Aug 2020 07:00:00Reported by MicrosoftType

Linux kernel floppy driver set_fdc allows out-of-bounds read from unchecked FDC index.

Reporter	Title	Published	Views	Family All 313
IBM Security Bulletins	Security Bulletin: Publicly disclosed vulnerability from Kernel affects IBM Netezza Host Management	23 Sep 202012:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by multiple vulnerabilities in kernel.	7 Jul 202211:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Linux Kernel affect IBM Spectrum Protect Plus	1 Apr 202000:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	2 Feb 202105:06	–	ibm
ArchLinux	[ASA-202003-6] linux: multiple issues	8 Mar 202000:00	–	archlinux
CBLMariner	CVE-2020-9383 affecting package kernel 5.4.91-6	6 Apr 202123:51	–	cbl_mariner
Tenable Nessus	CentOS 7 : kernel-alt (RHSA-2020:2104)	9 Oct 202400:00	–	nessus
Tenable Nessus	CentOS 7 : kernel (RHSA-2020:4060)	20 Oct 202000:00	–	nessus
Tenable Nessus	Debian DLA-2241-2 : linux security update	10 Jun 202000:00	–	nessus
Tenable Nessus	Debian DLA-2242-1 : linux-4.9 security update	11 Jun 202000:00	–	nessus