CVE-2019-14284: In the Linux kernel before 5.2.3, drivers/block/floppy.c allows a denial of service by setup_format_params...

Security readout for executives and security teams

CVE-2019-14284 is a Linux kernel flaw in floppy disk handling that can let a local, unprivileged user crash or disrupt a system. It does not indicate remote compromise or data theft in the provided sources, but it can affect availability, including virtual machines where QEMU creates a floppy device by default. Exposure is most relevant on Linux systems running vulnerable kernels with the floppy driver/device available. The source explicitly notes QEMU creates a floppy device by default, making virtualized Linux guests worth checking even when physical floppy hardware is absent. Treat this as a moderate availability risk. It is unlikely to be an emergency remote breach scenario based on the provided evidence, but it should be remediated through normal kernel patching, especially on multi-user systems and VM fleets. Mitigation focus: Update to a vendor-fixed kernel package or Linux 5.2.3 or later.; Review Debian, Ubuntu, SUSE, Slackware, or relevant vendor kernel advisories.; Check vendor guidance before changing floppy driver or VM device configuration..

Prepared

Jun 6, 2026, 14:06 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.