x86/boot: Validate console=uart8250 baud rate to fix early boot hang
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.2%
exploitation probability
0.2%top 89% of all CVEs
observed exploitation
nono source reports it
In the Linux kernel, the following vulnerability has been resolved:
x86/boot: Validate console=uart8250 baud rate to fix early boot hang
When the baud rate is empty, 0, invalid, or overflows to 0 when stored
as an int, the system will hang during early boot because of a division
by zero in early_serial_init().
Fall back to DEFAULT_BAUD when the resulting baud rate is 0 to prevent
an early system hang.
Affected products
Linux · LinuxReferences
https://git.kernel.org/stable/c/24fbed0a2a45f5f379ef2b53bd2abe58be1142adhttps://git.kernel.org/stable/c/4dad7e870c7e5178f71b5e1e4f67934b9e8cc207https://git.kernel.org/stable/c/9a77a7639dfdc3eca417cd37620ce64da79c80c4https://git.kernel.org/stable/c/b4d05032e9af7137eab8f3af2855073f896ca843https://git.kernel.org/stable/c/c1a276a731d02cbb728d0530f327a68728f2d8b0https://git.kernel.org/stable/c/efa96a22613b86e05cd81229ce0be411c1a4a79ahttps://git.kernel.org/stable/c/f7c67c97b37c11f2a95c204092fb8159f2779e8fhttps://git.kernel.org/stable/c/ffa0aa5b625fe0bed7463ac613f8b06676ff4542