A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, calling an ioctl VT_RESIZE, which causes an out-of-bounds write to occur. This flaw allows a local user with access to the VGA console to crash the system, potentially escalating their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 6.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.198-152.320Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfo | Oct 2, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade kernel | Oct 28, 2020 | Jul 31, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 21, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-debuginfo | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfo | Sep 28, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-devel | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-headersUpgrade perfUpgrade kernel-sourceUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-devel | Nov 3, 2020 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 11, 2020 | Jul 28, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 15, 2020 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Oct 21, 2020 | Sep 15, 2020 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default-extra | Aug 7, 2020 | Jul 31, 2020 |
| Ubuntu | — | Upgrade linux-fipsUpgrade linux-azure-fipsUpgrade linux-aws-fipsUpgrade linux-gcp-fips | Feb 11, 2025 | Sep 15, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub