A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, calling an ioctl VT_RESIZE, which causes an out-of-bounds write to occur. This flaw allows a local user with access to the VGA console to crash the system, potentially escalating their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 6.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-livepatch-4.14.198-152.320Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade python-perf | Oct 2, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade kernel | Oct 28, 2020 | Jul 31, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 21, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-tools | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfo | Sep 28, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headers | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade perfUpgrade kernel-sourceUpgrade kernel-headersUpgrade python-perf | Nov 3, 2020 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Sep 11, 2020 | Jul 28, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 15, 2020 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Oct 21, 2020 | Sep 15, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-build | Aug 7, 2020 | Jul 31, 2020 |
| Ubuntu | — | Upgrade linux-gcp-fipsUpgrade linux-fipsUpgrade linux-aws-fipsUpgrade linux-azure-fips | Feb 11, 2025 | Sep 15, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub