A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the kernel, aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_COPY in drivers/tty/vt/vt.c can be used for manipulations such as font height.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Nov 20, 2020 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-livepatch-4.14.209-160.335Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-tools | Dec 10, 2020 | Nov 20, 2020 |
| Amazon_linux | — | Upgrade kernel | Dec 19, 2020 | Nov 20, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 1, 2021 | Nov 20, 2020 |
| Debian | — | Upgrade linux | Dec 7, 2020 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debug | Feb 22, 2021 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perfUpgrade python-perf | Jan 20, 2021 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-libsUpgrade kernel | Mar 24, 2021 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade python-perfUpgrade kernel-sourceUpgrade python3-perfUpgrade perfUpgrade kernel-headers | Dec 15, 2020 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Jan 5, 2021 | Nov 20, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Dec 15, 2020 | Nov 9, 2020 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | May 21, 2021 | Nov 20, 2020 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-docs | Dec 11, 2020 | Nov 20, 2020 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-5.8.0-1016-raspiUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.8.0-44-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1031-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.8.0-1024-awsUpgrade linux-image-4.4.0-1147-snapdragonUpgrade linux-image-4.4.0-198-powerpc-e500mcUpgrade linux-image-oem-osp1Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-129-generic-lpaeUpgrade linux-image-5.8.0-1023-gcpUpgrade linux-image-raspi2Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1077-gkeUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1077-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oem-20.04Upgrade linux-image-gkeUpgrade linux-image-4.4.0-198-powerpc64-smpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.8.0-44-generic-lpaeUpgrade linux-image-5.8.0-1023-azureUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-18.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1062-oracleUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1091-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1034-oracleUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.8.0-1016-raspi-nolpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.4.0-198-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1103-azureUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.4.0-59-genericUpgrade linux-image-4.4.0-1143-raspi2Upgrade linux-image-5.6.0-1039-oemUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-129-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.8.0-1021-oracleUpgrade linux-image-azureUpgrade linux-image-4.15.0-1082-kvmUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1119-awsUpgrade linux-image-5.4.0-1026-raspiUpgrade linux-image-4.15.0-1091-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1035-azureUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-198-genericUpgrade linux-image-4.4.0-1083-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1085-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-198-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-129-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.8.0-44-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1033-gcpUpgrade linux-image-oemUpgrade linux-image-oracleUpgrade linux-image-5.8.0-44-generic-64kUpgrade linux-image-5.8.0-1019-kvmUpgrade linux-image-4.15.0-1094-snapdragonUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-198-powerpc64-embUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1034-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-4.4.0-198-powerpc-smpUpgrade linux-image-5.4.0-1033-gkeUpgrade linux-image-snapdragonUpgrade linux-image-5.4.0-59-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-59-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04 | Jan 6, 2021 | Nov 20, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 20, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub