A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, calling an ioctl VT_RESIZE, which causes an out-of-bounds write to occur. This flaw allows a local user with access to the VGA console to crash the system, potentially escalating their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 6.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-livepatch-4.14.198-152.320 | Oct 2, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade kernel | Oct 28, 2020 | Jul 31, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 21, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debug | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debuginfo | Sep 28, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade kernel-develUpgrade perf | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-sourceUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel | Nov 3, 2020 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 11, 2020 | Jul 28, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 15, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Oct 21, 2020 | Sep 15, 2020 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-default | Aug 7, 2020 | Jul 31, 2020 |
| Ubuntu | — | Upgrade linux-gcp-fipsUpgrade linux-fipsUpgrade linux-azure-fipsUpgrade linux-aws-fips | Feb 11, 2025 | Sep 15, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub