usb-storage: alauda: Check whether the media is initialized

Summary

In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Check whether the media is initialized The member "uzonesize" of struct alauda_info will remain 0 if alauda_init_media() fails, potentially causing divide errors in alauda_read_data() and alauda_write_lba(). • Add a member "media_initialized" to struct alauda_info. • Change a condition in alauda_check_media() to ensure the first initialization. • Add an error check for the return value of alauda_init_media().

Timeline

1. Jun 20, 2024, 6:47 AM UTCCVE published
2. Sep 10, 2024, 5:11 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: partial

3. Oct 15, 2026, 12:43 AM UTCRecord last updated

Affected versions

• Linux Linux

  From e80b0fade09ef1ee67b0898d480d4c588f124d5f · fixed in e0aab7b07a9375337847c9d74a5ec044071e01c8; From e80b0fade09ef1ee67b0898d480d4c588f124d5f · fixed in 51fe16c058acb22f847e69bc598066ed0bcd5c15; From e80b0fade09ef1ee67b0898d480d4c588f124d5f · fixed in f68820f1256b21466ff094dd97f243b7e708f9c1; From e80b0fade09ef1ee67b0898d480d4c588f124d5f · fixed in 3eee13ab67f65606faa66e0c3c729e4f514838fd; From e80b0fade09ef1ee67b0898d480d4c588f124d5f · fixed in e0e2eec76920a133dd49a4fbe4656d83596a1361; From e80b0fade09ef1ee67b0898d480d4c588f124d5f · fixed in 2cc32639ec347e3365075b130f9953ef16cb13f1; From e80b0fade09ef1ee67b0898d480d4c588f124d5f · fixed in 24bff7f714bdff97c2a75a0ff6a368cdf8ad5af4; From e80b0fade09ef1ee67b0898d480d4c588f124d5f · fixed in 16637fea001ab3c8df528a8995b3211906165a30

• Linux Linux

  2.6.16

• KernelLinux

  From 2.6.16 · fixed in 4.19.317; From 4.20.0 · fixed in 5.4.279; From 5.5.0 · fixed in 5.10.221; From 5.11.0 · fixed in 5.15.162; From 5.16.0 · fixed in 6.1.95; From 6.2.0 · fixed in 6.6.35; From 6.7.0 · fixed in 6.9.6

References 8