CVE-2024-43893

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

serial: core: check uartclk for zero to avoid divide by zero

Calling ioctl TIOCSSERIAL with an invalid baud_base can

result in uartclk being zero, which will result in a

divide by zero error in uart_get_divisor(). The check for

uartclk being zero in uart_set_info() needs to be done

before other settings are made as subsequent calls to

ioctl TIOCSSERIAL for the same port would be impacted if

the uartclk check was done where uartclk gets set.

Oops: divide error: 0000 PREEMPT SMP KASAN PTI

RIP: 0010:uart_get_divisor (drivers/tty/serial/serial_core.c:580)

Call Trace:

<TASK>

serial8250_get_divisor (drivers/tty/serial/8250/8250_port.c:2576

drivers/tty/serial/8250/8250_port.c:2589)

serial8250_do_set_termios (drivers/tty/serial/8250/8250_port.c:502

drivers/tty/serial/8250/8250_port.c:2741)

serial8250_set_termios (drivers/tty/serial/8250/8250_port.c:2862)

uart_change_line_settings (./include/linux/spinlock.h:376

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References