CVE-2018-7273

root@kitploit: include include include include include include include include include include static int driveselectorint head return head 2; void fdrecalibrateint fd struct floppyrawcmd rawcmd; int tmp; rawcmd.flags = FDRAWINTR; rawcmd.cmdcount = 2; // 명령 설정 rawcmd.cmdrawcmd.cmdcount++ = 0x07;...

Astra Linux – Vulnerability in Linux, Linux 5.10

The drivers/block/floppy.c file in the Linux kernel before version 5.17.6 is vulnerable to a denial-of-service attack due to a concurrency issue after deallocating rawcmd in the rawcmdioctl function...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010728)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010728 advisory. drivers/block/floppy.c in the Linux kernel before 5.17.6 is vulnerable to a denial of service, because of a concurrency use-after-free flaw after deallocating rawcmd...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013306)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013306 advisory. drivers/block/floppy.c in the Linux kernel before 5.17.6 is vulnerable to a denial of service, because of a concurrency use-after-free flaw after deallocating rawcmd...

The vulnerability of the do_floppy_init() function in the drivers/block/floppy.c module of the Linux kernel’s block devices driver allows a attacker to cause a service failure.

The vulnerability of the dofloppyinit function in the drivers/block/floppy.c module of the Linux kernel’s block devices driver is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

MiracleLinux 4 : kernel-2.6.32-431.20.3.el6 (AXSA:2014-454:03)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-454:03 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001319)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001319 advisory. An issue was discovered in the Linux kernel 3.16 through 5.5.6. setfdc in drivers/block/floppy.c leads to a waittilready out-of-bounds read because the FDC index is...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003710)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003710 advisory. An issue was discovered in the fdlockedioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001607)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001607 advisory. In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showflopp...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003714)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003714 advisory. In the Linux kernel before 5.2.3, setgeometry in drivers/block/floppy.c does not validate the sect and head fields, as demonstrated by an integer overflow and...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001302)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001302 advisory. An issue was discovered in the fdlockedioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003515)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003515 advisory. In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showflopp...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003532)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003532 advisory. An issue was discovered in the fdlockedioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003529)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003529 advisory. In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showflopp...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000201)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000201 advisory. In the Linux kernel before 5.2.3, drivers/block/floppy.c allows a denial of service by setupformatparams division-by-zero. Two consecutive ioctls can trigger the bug...

EUVD-2018-19008

Malware in sbrugna...

EUVD-2018-19467

Malware in sbrugna...

PT-2025-38011

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak was identified in the do floppy init function within the Linux kernel. The leak occurs when floppy alloc disk fails during initialization, specifically when allocating di...

CVE-2021-47039

In the Linux kernel, the following vulnerability has been resolved: ataflop: potential out of bounds in doformat The function uses "type" as an array index: q = unitdrive.disktype-queue; Unfortunately the bounds check on "type" isn't done until later in the function. Fix this by moving the bounds...

K03007515: Linux kernel vulnerabilities CVE-2018-7755 and CVE-2019-14283

Security Advisory Description CVE-2018-7755 An issue was discovered in the fdlockedioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl an...