CVE-2023-31085: Divide by Zero
Published Apr 24, 2023
·Updated
An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error in dodiv(sz,mtd->erasesize), used indirectly by ctrlcdevioctl, when mtd->erasesize is 0.
Affected Software
2 affected components
Linux Linux kernel=6.2
debian/linux<=5.10.223-1, <=5.10.234-1, <=6.1.129-1, <=6.1.135-1, <=6.12.25-1, <=6.12.27-1
Event History
Apr 24, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeaknessAffected Software
Jan 12, 2024
Data Sourced
via Launchpad·12:19 AM
Description
Apr 28, 2025
Data Sourced
via Ubuntu·02:13 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-31085?
CVE-2023-31085 is classified as a medium severity vulnerability due to the potential for a divide-by-zero error.
2
How do I fix CVE-2023-31085?
To fix CVE-2023-31085, update the Linux kernel to a version later than 6.2 that addresses this issue.
3
What impact does CVE-2023-31085 have on affected systems?
CVE-2023-31085 could lead to denial of service or undefined behavior in the affected systems due to the divide-by-zero error.
4
Which versions of the Linux kernel are affected by CVE-2023-31085?
CVE-2023-31085 specifically affects Linux kernel version 6.2.
5
Can CVE-2023-31085 be exploited remotely?
CVE-2023-31085 does not appear to be remotely exploitable and requires local access to trigger the vulnerability.