A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the kernel, aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_COPY in drivers/tty/vt/vt.c can be used for manipulations such as font height.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Nov 20, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.209-160.335Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-headers | Dec 10, 2020 | Nov 20, 2020 |
| Amazon_linux | — | Upgrade kernel | Dec 19, 2020 | Nov 20, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 1, 2021 | Nov 20, 2020 |
| Debian | — | Upgrade linux | Dec 7, 2020 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debug-devel | Feb 22, 2021 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel | Jan 20, 2021 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools | Mar 24, 2021 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade bpftoolUpgrade kernel-sourceUpgrade python-perfUpgrade kernel-headersUpgrade perfUpgrade python3-perf | Dec 15, 2020 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jan 5, 2021 | Nov 20, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Dec 15, 2020 | Nov 9, 2020 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 21, 2021 | Nov 20, 2020 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-default | Dec 11, 2020 | Nov 20, 2020 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.8.0-44-generic-lpaeUpgrade linux-image-4.15.0-129-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-4.4.0-1147-snapdragonUpgrade linux-image-4.15.0-1077-gkeUpgrade linux-image-oem-osp1Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1103-azureUpgrade linux-image-5.4.0-1034-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-198-powerpc64-smpUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-5.8.0-1024-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-5.4.0-1031-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-4.15.0-129-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.8.0-1016-raspiUpgrade linux-image-4.15.0-1077-raspi2Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1091-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-198-powerpc-e500mcUpgrade linux-image-5.4.0-59-genericUpgrade linux-image-5.8.0-1016-raspi-nolpaeUpgrade linux-image-5.8.0-44-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-198-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1062-oracleUpgrade linux-image-powerpc64-embUpgrade linux-image-5.6.0-1039-oemUpgrade linux-image-4.4.0-1143-raspi2Upgrade linux-image-5.8.0-1023-gcpUpgrade linux-image-azureUpgrade linux-image-5.8.0-1021-oracleUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.8.0-1023-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-1094-snapdragonUpgrade linux-image-4.4.0-198-genericUpgrade linux-image-awsUpgrade linux-image-5.4.0-1033-gkeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.4.0-1035-azureUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1034-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1119-awsUpgrade linux-image-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-59-generic-lpaeUpgrade linux-image-5.4.0-1033-gcpUpgrade linux-image-4.4.0-1085-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-198-powerpc64-embUpgrade linux-image-5.8.0-1019-kvmUpgrade linux-image-gke-4.15Upgrade linux-image-oracleUpgrade linux-image-4.4.0-1083-awsUpgrade linux-image-5.4.0-1026-raspiUpgrade linux-image-5.8.0-44-generic-64kUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-129-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-59-lowlatencyUpgrade linux-image-5.8.0-44-genericUpgrade linux-image-4.4.0-198-powerpc-smpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1091-gcpUpgrade linux-image-4.4.0-198-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-1082-kvm | Jan 6, 2021 | Nov 20, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 20, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub