A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the kernel, aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_COPY in drivers/tty/vt/vt.c can be used for manipulations such as font height.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Nov 20, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-4.14.209-160.335Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64 | Dec 10, 2020 | Nov 20, 2020 |
| Amazon_linux | — | Upgrade kernel | Dec 19, 2020 | Nov 20, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 1, 2021 | Nov 20, 2020 |
| Debian | — | Upgrade linux | Dec 7, 2020 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade python-perfUpgrade perfUpgrade kernel-tools | Feb 22, 2021 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo | Jan 20, 2021 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools | Mar 24, 2021 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade python3-perfUpgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-develUpgrade kernel | Dec 15, 2020 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Jan 5, 2021 | Nov 20, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Dec 15, 2020 | Nov 9, 2020 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 21, 2021 | Nov 20, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-default | Dec 11, 2020 | Nov 20, 2020 |
| Ubuntu | — | Upgrade linux-image-gke-4.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-129-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.4.0-1034-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-4.4.0-198-powerpc-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1035-azureUpgrade linux-image-5.4.0-59-generic-lpaeUpgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-1082-kvmUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1119-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-5.8.0-1019-kvmUpgrade linux-image-5.4.0-1026-raspiUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1033-gcpUpgrade linux-image-4.4.0-198-powerpc64-embUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1033-gkeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1094-snapdragonUpgrade linux-image-4.15.0-1091-gcpUpgrade linux-image-snapdragonUpgrade linux-image-5.4.0-59-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.8.0-44-genericUpgrade linux-image-4.4.0-1083-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1085-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-198-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-198-genericUpgrade linux-image-oemUpgrade linux-image-kvmUpgrade linux-image-5.8.0-44-generic-64kUpgrade linux-image-4.15.0-1103-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-198-powerpc-e500mcUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-129-genericUpgrade linux-image-5.8.0-44-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-5.8.0-1016-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1034-oracleUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1147-snapdragonUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-129-generic-lpaeUpgrade linux-image-4.4.0-198-powerpc64-smpUpgrade linux-image-4.15.0-1062-oracleUpgrade linux-image-genericUpgrade linux-image-5.8.0-1024-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1077-raspi2Upgrade linux-image-virtualUpgrade linux-image-powerpc64-embUpgrade linux-image-5.8.0-1023-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1031-kvmUpgrade linux-image-4.15.0-1077-gkeUpgrade linux-image-5.8.0-1016-raspi-nolpaeUpgrade linux-image-azureUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.8.0-1023-gcpUpgrade linux-image-4.4.0-198-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-59-genericUpgrade linux-image-5.8.0-1021-oracleUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.6.0-1039-oemUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-oem-20.04Upgrade linux-image-5.8.0-44-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1091-awsUpgrade linux-image-4.4.0-1143-raspi2 | Jan 6, 2021 | Nov 20, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 20, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub