A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the kernel, aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_COPY in drivers/tty/vt/vt.c can be used for manipulations such as font height.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Nov 20, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.209-160.335Upgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo | Dec 10, 2020 | Nov 20, 2020 |
| Amazon_linux | — | Upgrade kernel | Dec 19, 2020 | Nov 20, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 1, 2021 | Nov 20, 2020 |
| Debian | — | Upgrade linux | Dec 7, 2020 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-develUpgrade kernelUpgrade kernel-headers | Feb 22, 2021 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perfUpgrade python-perf | Jan 20, 2021 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernelUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools | Mar 24, 2021 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-sourceUpgrade python-perfUpgrade python3-perfUpgrade perf | Dec 15, 2020 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Jan 5, 2021 | Nov 20, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Dec 15, 2020 | Nov 9, 2020 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 21, 2021 | Nov 20, 2020 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-obs-build | Dec 11, 2020 | Nov 20, 2020 |
| Ubuntu | — | Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1034-awsUpgrade linux-image-5.4.0-1035-azureUpgrade linux-image-kvmUpgrade linux-image-5.8.0-1019-kvmUpgrade linux-image-4.15.0-1094-snapdragonUpgrade linux-image-awsUpgrade linux-image-5.4.0-1033-gkeUpgrade linux-image-4.4.0-1085-kvmUpgrade linux-image-4.15.0-1082-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-59-generic-lpaeUpgrade linux-image-4.4.0-198-powerpc64-embUpgrade linux-image-gke-5.4Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-198-genericUpgrade linux-image-5.4.0-59-lowlatencyUpgrade linux-image-5.8.0-44-genericUpgrade linux-image-4.4.0-198-powerpc-smpUpgrade linux-image-4.15.0-1091-gcpUpgrade linux-image-4.4.0-1083-awsUpgrade linux-image-5.8.0-44-generic-64kUpgrade linux-image-5.4.0-1026-raspiUpgrade linux-image-4.15.0-129-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-4.4.0-198-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-oemUpgrade linux-image-5.4.0-1033-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gke-4.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-snapdragonUpgrade linux-image-powerpc64-smpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.4.0-1119-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.8.0-1021-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.8.0-1023-gcpUpgrade linux-image-5.4.0-59-genericUpgrade linux-image-4.4.0-198-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.8.0-1016-raspi-nolpaeUpgrade linux-image-4.15.0-1077-gkeUpgrade linux-image-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-129-genericUpgrade linux-image-5.8.0-1016-raspiUpgrade linux-image-4.15.0-1091-awsUpgrade linux-image-4.4.0-1143-raspi2Upgrade linux-image-5.8.0-44-lowlatencyUpgrade linux-image-5.4.0-1031-kvmUpgrade linux-image-5.4.0-1034-oracleUpgrade linux-image-gcpUpgrade linux-image-5.8.0-1024-awsUpgrade linux-image-5.6.0-1039-oemUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1103-azureUpgrade linux-image-5.8.0-44-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1147-snapdragonUpgrade linux-image-raspi2Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-198-powerpc-e500mcUpgrade linux-image-azureUpgrade linux-image-4.15.0-129-generic-lpaeUpgrade linux-image-4.4.0-198-powerpc64-smpUpgrade linux-image-genericUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-azure-lts-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-1077-raspi2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1062-oracleUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.8.0-1023-azure | Jan 6, 2021 | Nov 20, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 20, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub