The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. There is a vgacon_scrolldelta out-of-bounds read, aka CID-973c096f6a85.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 24, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-develUpgrade kernelUpgrade perf | Sep 29, 2021 | Jun 24, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Sep 29, 2021 | Jun 24, 2021 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 9, 2021 | Sep 16, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 24, 2021 |
| Suse | — | Upgrade cluster-md-kmp-preemptUpgrade kernel-default-extraUpgrade dtb-alUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade gfs2-kmp-preemptUpgrade kernel-preemptUpgrade dtb-zteUpgrade kernel-preempt-livepatch-develUpgrade kernel-preempt-optionalUpgrade kernel-preempt-develUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-preemptUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-preemptUpgrade reiserfs-kmp-preemptUpgrade dlm-kmp-preemptUpgrade kernel-preempt-extraUpgrade dlm-kmp-default | Feb 11, 2022 | Jun 24, 2021 |
| Ubuntu | — | Upgrade linux-azure-4.15Upgrade linux-azure-fdeUpgrade linux-gke-5.4Upgrade linux-oracleUpgrade linux-snapdragonUpgrade linux-aws-5.4Upgrade linux-gkeop-5.4Upgrade linux-kvmUpgrade linux-lts-xenialUpgrade linux-aws-hweUpgrade linux-raspiUpgrade linux-hweUpgrade linux-azureUpgrade linux-raspi-5.4Upgrade linux-azure-5.4Upgrade linux-gcp-4.15Upgrade linux-gcp-5.4Upgrade linux-oracle-5.4Upgrade linux-azure-fde-5.15Upgrade linux-gcp-fipsUpgrade linux-azure-fipsUpgrade linux-awsUpgrade linux-gcpUpgrade linux-raspi2Upgrade linux-fipsUpgrade linux-aws-fipsUpgrade linuxUpgrade linux-hwe-5.4Upgrade linux-dell300x | Nov 19, 2024 | Jun 24, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub