CVE-2023-31085

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-04-24 · updated 2026-10-14
Weakness: CWE-369

Description

An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error in do_div(sz,mtd->erasesize), used indirectly by ctrl_cdev_ioctl, when mtd->erasesize is 0.

Affected products

Linux kernel: 6.2

References

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=017c73a34a661a861712f7cc1393a123e5b2208c
https://lore.kernel.org/all/687864524.118195.1681799447034.JavaMail.zimbra%40nod.at/
https://security.netapp.com/advisory/ntap-20230929-0003/
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=017c73a34a661a861712f7cc1393a123e5b2208c
https://lore.kernel.org/all/687864524.118195.1681799447034.JavaMail.zimbra%40nod.at/
https://security.netapp.com/advisory/ntap-20230929-0003/
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-769027.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html

Get alerted when CVE-2023-31085 or the next vulnerability affects your stack