Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-50076

vt: prevent kernel-infoleak in con_font_get()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: vt: prevent kernel-infoleak in con_font_get() font.data may not initialize all memory spaces depending on the implementation of vc->vc_sw->con_font_get. This may cause info-leak, so to prevent this, it is safest to modify it to initialize the allocated memory space to 0, and it generally does not affect the overall performance of the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < efc67cee700b89ffbdb74a0603a083ec1290ae31affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < dc794e878e6d79f75205be456b1042a289c5759daffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 1e5a17dc77d8a8bbe67040b32e2ef755901aba44affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < b3959d5eca136e0588f9af3867b34032160cb826affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 23c4cb8a56978e5b1baa171d42e616e316c2039daffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < dc2d5f02636c7587bdd6d1f60fc59c55860b00a4affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < adb1f312f38f0d2c928ceaff089262798cc260b4affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < f956052e00de211b5c9ebaa1958366c23f82ee9eaffected

Linux Linux

Default version status: affected

  • 2.6.12affected
  • 0 to < 2.6.12unaffected
  • 4.19.323 to ≤ 4.19.*unaffected
  • 5.4.285 to ≤ 5.4.*unaffected
  • 5.10.229 to ≤ 5.10.*unaffected
  • 5.15.171 to ≤ 5.15.*unaffected
  • 6.1.116 to ≤ 6.1.*unaffected
  • 6.6.58 to ≤ 6.6.*unaffected
  • 6.11.5 to ≤ 6.11.*unaffected
  • 6.12 to ≤ *unaffected

References