An issue was discovered in the Linux kernel through 5.5.6. set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC index is not checked for errors before assigning it. Reference and upstream commit:

Created kernel tracking bugs for this issue: Affects:….

Source link

You must be logged in to post a comment.