Divide By Zero Affecting perf package, versions *
Threat Intelligence
EPSS
0.04% (6th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-RHEL8-PERF-5670341
- published 7 Jun 2023
- disclosed 18 Apr 2023
Introduced: 18 Apr 2023
CVE-2023-31085 Open this link in a new tabHow to fix?
There is no fixed version for RHEL:8 perf.
NVD Description
Note: Versions mentioned in the description apply only to the upstream perf package and not the perf package as distributed by RHEL.
See How to fix? for RHEL:8 relevant fixed versions and status.
An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error in do_div(sz,mtd->erasesize), used indirectly by ctrl_cdev_ioctl, when mtd->erasesize is 0.
References
- https://access.redhat.com/security/cve/CVE-2023-31085
- https://lore.kernel.org/all/687864524.118195.1681799447034.JavaMail.zimbra@nod.at/
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=017c73a34a661a861712f7cc1393a123e5b2208c
- https://lore.kernel.org/all/687864524.118195.1681799447034.JavaMail.zimbra%40nod.at/
- https://security.netapp.com/advisory/ntap-20230929-0003/
CVSS Scores
version 3.1