Linux Kernel Division by Zero Vulnerability in SCD30 Chemical Sensor Driver

A division by zero vulnerability has been identified in the Linux kernel's SCD30 chemical sensor driver, specifically in the 'write_raw' function. This issue arises when a user writes a zero fractional part to the 'sampling_frequency' sysfs attribute, leading to a kernel crash. The vulnerability affects several versions of the Linux kernel.

Impact

Exploitation of this vulnerability causes a kernel crash due to a division by zero error, which can disrupt system operations and potentially lead to a denial of service.

Reproduction

To reproduce this vulnerability, write a zero fractional value to the 'sampling_frequency' sysfs attribute of the SCD30 chemical sensor driver. This action will trigger a division by zero error in the kernel, causing a crash.

Remediation

Users can update to the latest version of the Linux kernel, where this vulnerability has been fixed, to address this issue.