Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Check whether the media is initialized The member "uzonesize" of struct alauda_info will remain 0 if alauda_init_media() fails, potentially causing divide errors in alauda_read_data() and alauda_write_lba(). - Add a member "media_initialized" to struct alauda_info. - Change a condition in alauda_check_media() to ensure the first initialization. - Add an error check for the return value of alauda_init_media().
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected e80b0fade09ef1ee67b0898d480d4c588f124d5f before e0aab7b07a9375337847c9d74a5ec044071e01c8; affected e80b0fade09ef1ee67b0898d480d4c588f124d5f before 51fe16c058acb22f847e69bc598066ed0bcd5c15; affected e80b0fade09ef1ee67b0898d480d4c588f124d5f before f68820f1256b21466ff094dd97f243b7e708f9c1; affected e80b0fade09ef1ee67b0898d480d4c588f124d5f before 3eee13ab67f65606faa66e0c3c729e4f514838fd; affected e80b0fade09ef1ee67b0898d480d4c588f124d5f before e0e2eec76920a133dd49a4fbe4656d83596a1361; affected e80b0fade09ef1ee67b0898d480d4c588f124d5f before 2cc32639ec347e3365075b130f9953ef16cb13f1; affected e80b0fade09ef1ee67b0898d480d4c588f124d5f before 24bff7f714bdff97c2a75a0ff6a368cdf8ad5af4; affected e80b0fade09ef1ee67b0898d480d4c588f124d5f before 16637fea001ab3c8df528a8995b3211906165a30 |
| Linux / Linux | affected 2.6.16; unaffected 0 before 2.6.16; unaffected 4.19.317 through 4.19.*; unaffected 5.4.279 through 5.4.*; unaffected 5.10.221 through 5.10.*; unaffected 5.15.162 through 5.15.*; unaffected 6.1.95 through 6.1.*; unaffected 6.6.35 through 6.6.*; unaffected 6.9.6 through 6.9.*; unaffected 6.10 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/e0aab7b07a9375337847c9d74a5ec044071e01c8
- https://git.kernel.org/stable/c/51fe16c058acb22f847e69bc598066ed0bcd5c15
- https://git.kernel.org/stable/c/f68820f1256b21466ff094dd97f243b7e708f9c1
- https://git.kernel.org/stable/c/3eee13ab67f65606faa66e0c3c729e4f514838fd
- https://git.kernel.org/stable/c/e0e2eec76920a133dd49a4fbe4656d83596a1361
- https://git.kernel.org/stable/c/2cc32639ec347e3365075b130f9953ef16cb13f1
- https://git.kernel.org/stable/c/24bff7f714bdff97c2a75a0ff6a368cdf8ad5af4
- https://git.kernel.org/stable/c/16637fea001ab3c8df528a8995b3211906165a30
ADP enrichment
No English description supplied.
- https://git.kernel.org/stable/c/e0aab7b07a9375337847c9d74a5ec044071e01c8
- https://git.kernel.org/stable/c/51fe16c058acb22f847e69bc598066ed0bcd5c15
- https://git.kernel.org/stable/c/f68820f1256b21466ff094dd97f243b7e708f9c1
- https://git.kernel.org/stable/c/3eee13ab67f65606faa66e0c3c729e4f514838fd
- https://git.kernel.org/stable/c/e0e2eec76920a133dd49a4fbe4656d83596a1361
- https://git.kernel.org/stable/c/2cc32639ec347e3365075b130f9953ef16cb13f1
- https://git.kernel.org/stable/c/24bff7f714bdff97c2a75a0ff6a368cdf8ad5af4
- https://git.kernel.org/stable/c/16637fea001ab3c8df528a8995b3211906165a30
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
No English description supplied.
No references supplied.
No English description supplied.