A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, calling an ioctl VT_RESIZE, which causes an out-of-bounds write to occur. This flaw allows a local user with access to the VGA console to crash the system, potentially escalating their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 6.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-livepatch-4.14.198-152.320Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perf-debuginfo | Oct 2, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade kernel | Oct 28, 2020 | Jul 31, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 21, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel | Sep 28, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade kernel-tools | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade python-perfUpgrade kernel-sourceUpgrade kernel-headersUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-devel | Nov 3, 2020 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 11, 2020 | Jul 28, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 15, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Oct 21, 2020 | Sep 15, 2020 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-docs | Aug 7, 2020 | Jul 31, 2020 |
| Ubuntu | — | Upgrade linux-aws-fipsUpgrade linux-fipsUpgrade linux-azure-fipsUpgrade linux-gcp-fips | Feb 11, 2025 | Sep 15, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub