Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2022-49948

vt: Clear selection before changing the font

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 3.3, 3.11, 3.13, 3.17, 3.19, and 10 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

In the Linux kernel, the following vulnerability has been resolved: vt: Clear selection before changing the font When changing the console font with ioctl(KDFONTOP) the new font size can be bigger than the previous font. A previous selection may thus now be outside of the new screen size and thus trigger out-of-bounds accesses to graphics memory if the selection is removed in vc_do_resize(). Prevent such out-of-memory accesses by dropping the selection before the various con_font_set() console handlers are called.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • Linux Linux

    From 009e39ae44f4191188aeb6dfbf661b771dbbe515 · fixed in c555cf04684fde39b5b0dd9fd80730030ee10c4a; From 009e39ae44f4191188aeb6dfbf661b771dbbe515 · fixed in e9ba4611ddf676194385506222cce7b0844e708e; From 009e39ae44f4191188aeb6dfbf661b771dbbe515 · fixed in f74b4a41c5d7c9522469917e3072e55d435efd9e; From 009e39ae44f4191188aeb6dfbf661b771dbbe515 · fixed in 1cf1930369c9dc428d827b60260c53271bff3285; From 009e39ae44f4191188aeb6dfbf661b771dbbe515 · fixed in 989201bb8c00b222235aff04e6200230d29dc7bb; From 009e39ae44f4191188aeb6dfbf661b771dbbe515 · fixed in 2535431ae967ad17585513649625fea7db28d4db; From 009e39ae44f4191188aeb6dfbf661b771dbbe515 · fixed in c904fe03c4bd1f356a58797d39e2a5d0ca15cefc; From 009e39ae44f4191188aeb6dfbf661b771dbbe515 · fixed in 566f9c9f89337792070b5a6062dff448b3e7977f; From 3.2.85 · fixed in 3.3; From 3.10.105 · fixed in 3.11; From 3.12.68 · fixed in 3.13; From 3.16.40 · fixed in 3.17; From 3.18.45 · fixed in 3.19; From 4.1.36 · fixed in 4.2; From 4.4.31 · fixed in 4.5; From 4.8.7 · fixed in 4.9

  • Linux Linux

    4.9

  • KernelLinux

    From 4.9.0 · fixed in 4.9.328; From 4.10.0 · fixed in 4.14.293; From 4.15.0 · fixed in 4.19.258; From 4.20.0 · fixed in 5.4.213; From 5.5.0 · fixed in 5.10.142; From 5.11.0 · fixed in 5.15.66; From 5.16.0 · fixed in 5.19.8

References 8

git.kernel.org