Search/CVE-2020-9383
● CVE — High

CVE-2020-9383

Vendordebian, linux, netapp, canonical, opensuseProductdebian linux, linux kernel, h410c firmware, ubuntu linux, leap, active iq unified manager, cloud backup, steelstore cloud integrated storage, solidfire, hci management node, data availability services, solidfire baseboard management controller firmwareDiscoveredFeb 25, 2020UpdatedNov 21, 2024

An issue was discovered in the Linux kernel 3.16 through 5.5.6. set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC index is not checked for errors before assigning it, aka CID-2e90ca68b0d2.

CVSS v3.1
7.1 HIGH
EPSS
0.76%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Sep 19, 2026
▲ 0.03pp
0.73% → 0.76% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Timeline
disclosure → media coverage
Feb 25, 2020
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024