DF-1350
XPT_CALC_GEOMETRY divides by block_size with no zero check
Summary
amd_action XPT_CALC_GEOMETRY at amd.c:683: size_mb=volume_size/((1024L*1024L)/block_size). block_size==0 -> divide-by-zero panic. Kernel-trusted CCB from privileged issuer. Fix: check block_size!=0.
Discussion (0)
PoC verification
Evidence pack
findings/poc/DF-1350 · 1 files| File | Type | Description | Size | |
|---|---|---|---|---|
| fix.diff | suggested-fix | XPT_CALC_GEOMETRY divides by block_size with no zero check | 437 B | view raw |
Fix verification
fixedbaseline reproduced→ patch + rebuild →patched clean
fix.diff applied + combined nativekernel build rc=0 (-Werror)
fix.diff applied + combined nativekernel build rc=0 (-Werror)
↓ fix.diffcombined build rc=0
Confirmed kernel references
—
Detail
Exploit chain
none (Info severity)
Evidence (decisive lines)
Source-confirmed at sys/dev/disk/amd/amd.c:683: XPT_CALC_GEOMETRY divides by block_size with no zero check
Verified recommended fix
Source-confirmed at sys/dev/disk/amd/amd.c:683: XPT_CALC_GEOMETRY divides by block_size with no zero check
Verdict
Source-confirmed at sys/dev/disk/amd/amd.c:683: XPT_CALC_GEOMETRY divides by block_size with no zero check
No comments yet.