A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, calling an ioctl VT_RESIZE, which causes an out-of-bounds write to occur. This flaw allows a local user with access to the VGA console to crash the system, potentially escalating their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 6.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.198-152.320Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headers | Oct 2, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade kernel | Oct 28, 2020 | Jul 31, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 21, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debug-devel | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-tools | Sep 28, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-tools | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade python-perfUpgrade kernel-headersUpgrade perfUpgrade kernel-source | Nov 3, 2020 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 11, 2020 | Jul 28, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 15, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Oct 21, 2020 | Sep 15, 2020 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-docs | Aug 7, 2020 | Jul 31, 2020 |
| Ubuntu | — | Upgrade linux-azure-fipsUpgrade linux-aws-fipsUpgrade linux-fipsUpgrade linux-gcp-fips | Feb 11, 2025 | Sep 15, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub