A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the kernel, aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_COPY in drivers/tty/vt/vt.c can be used for manipulations such as font height.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Nov 20, 2020 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.209-160.335Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Dec 10, 2020 | Nov 20, 2020 |
| Amazon_linux | — | Upgrade kernel | Dec 19, 2020 | Nov 20, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 1, 2021 | Nov 20, 2020 |
| Debian | — | Upgrade linux | Dec 7, 2020 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel | Feb 22, 2021 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Jan 20, 2021 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade python-perf | Mar 24, 2021 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade python-perfUpgrade kernel-headersUpgrade perfUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-develUpgrade kernel | Dec 15, 2020 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Jan 5, 2021 | Nov 20, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Dec 15, 2020 | Nov 9, 2020 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 21, 2021 | Nov 20, 2020 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-default | Dec 11, 2020 | Nov 20, 2020 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1091-gcpUpgrade linux-image-4.15.0-1082-kvmUpgrade linux-image-powerpc64-smpUpgrade linux-image-kvmUpgrade linux-image-5.8.0-44-generic-64kUpgrade linux-image-5.4.0-59-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-5.8.0-1019-kvmUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1035-azureUpgrade linux-image-5.4.0-1034-awsUpgrade linux-image-4.15.0-1094-snapdragonUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1119-awsUpgrade linux-image-5.4.0-1033-gcpUpgrade linux-image-awsUpgrade linux-image-gke-4.15Upgrade linux-image-5.4.0-59-lowlatencyUpgrade linux-image-5.8.0-44-genericUpgrade linux-image-5.4.0-1033-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.4.0-1085-kvmUpgrade linux-image-raspiUpgrade linux-image-4.4.0-198-generic-lpaeUpgrade linux-image-4.4.0-1083-awsUpgrade linux-image-4.4.0-198-powerpc64-embUpgrade linux-image-generic-lts-xenialUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-198-powerpc-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-gke-5.4Upgrade linux-image-powerpc-e500mcUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oemUpgrade linux-image-4.4.0-198-genericUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-129-lowlatencyUpgrade linux-image-5.4.0-1026-raspiUpgrade linux-image-4.4.0-1147-snapdragonUpgrade linux-image-4.15.0-1077-raspi2Upgrade linux-image-5.8.0-1021-oracleUpgrade linux-image-5.8.0-44-lowlatencyUpgrade linux-image-4.15.0-129-generic-lpaeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-raspi2Upgrade linux-image-4.4.0-198-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.8.0-1016-raspi-nolpaeUpgrade linux-image-4.15.0-1103-azureUpgrade linux-image-5.4.0-1031-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1034-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-198-powerpc64-smpUpgrade linux-image-generic-64kUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.6.0-1039-oemUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-198-powerpc-e500mcUpgrade linux-image-oem-osp1Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.8.0-44-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.8.0-1023-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1143-raspi2Upgrade linux-image-oem-20.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-1062-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-5.8.0-1024-awsUpgrade linux-image-5.4.0-59-genericUpgrade linux-image-gkeUpgrade linux-image-5.8.0-1023-gcpUpgrade linux-image-genericUpgrade linux-image-4.15.0-129-genericUpgrade linux-image-4.15.0-1091-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-azureUpgrade linux-image-4.15.0-1077-gkeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.8.0-1016-raspi | Jan 6, 2021 | Nov 20, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 20, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub