The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. There is a vgacon_scrolldelta out-of-bounds read, aka CID-973c096f6a85.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 24, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Sep 29, 2021 | Jun 24, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Sep 29, 2021 | Jun 24, 2021 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 9, 2021 | Sep 16, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 24, 2021 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-preempt-extraUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-preemptUpgrade kselftests-kmp-preemptUpgrade dlm-kmp-preemptUpgrade reiserfs-kmp-preemptUpgrade kernel-preempt-optionalUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-preempt-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-preemptUpgrade kernel-default-extraUpgrade cluster-md-kmp-preemptUpgrade kernel-preemptUpgrade dtb-alUpgrade kernel-defaultUpgrade dtb-zte | Feb 11, 2022 | Jun 24, 2021 |
| Ubuntu | — | Upgrade linux-dell300xUpgrade linux-aws-fipsUpgrade linux-gcp-5.4Upgrade linux-gcpUpgrade linuxUpgrade linux-awsUpgrade linux-fipsUpgrade linux-gcp-fipsUpgrade linux-oracle-5.4Upgrade linux-hwe-5.4Upgrade linux-azure-fipsUpgrade linux-azure-fde-5.15Upgrade linux-raspi2Upgrade linux-hweUpgrade linux-gke-5.4Upgrade linux-lts-xenialUpgrade linux-aws-5.4Upgrade linux-gkeop-5.4Upgrade linux-raspiUpgrade linux-kvmUpgrade linux-oracleUpgrade linux-gcp-4.15Upgrade linux-azure-5.4Upgrade linux-azureUpgrade linux-raspi-5.4Upgrade linux-aws-hweUpgrade linux-snapdragonUpgrade linux-azure-fdeUpgrade linux-azure-4.15 | Nov 19, 2024 | Jun 24, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub