A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the kernel, aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_COPY in drivers/tty/vt/vt.c can be used for manipulations such as font height.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Nov 20, 2020 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-4.14.209-160.335Upgrade kernel-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-tools | Dec 10, 2020 | Nov 20, 2020 |
| Amazon_linux | — | Upgrade kernel | Dec 19, 2020 | Nov 20, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 1, 2021 | Nov 20, 2020 |
| Debian | — | Upgrade linux | Dec 7, 2020 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade kernel-headers | Feb 22, 2021 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade perf | Jan 20, 2021 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-toolsUpgrade python-perf | Mar 24, 2021 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-develUpgrade python3-perfUpgrade kernel-sourceUpgrade python-perfUpgrade kernel-headersUpgrade perf | Dec 15, 2020 | Nov 20, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jan 5, 2021 | Nov 20, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Dec 15, 2020 | Nov 9, 2020 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 21, 2021 | Nov 20, 2020 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-default | Dec 11, 2020 | Nov 20, 2020 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1119-awsUpgrade linux-image-oracleUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-awsUpgrade linux-image-5.4.0-59-lowlatencyUpgrade linux-image-5.8.0-44-genericUpgrade linux-image-gke-4.15Upgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-59-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-raspiUpgrade linux-image-4.4.0-198-powerpc64-embUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-198-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-1082-kvmUpgrade linux-image-oemUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1033-gkeUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.8.0-44-generic-64kUpgrade linux-image-4.4.0-1085-kvmUpgrade linux-image-5.4.0-1035-azureUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1091-gcpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1083-awsUpgrade linux-image-4.4.0-198-powerpc-smpUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1034-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1026-raspiUpgrade linux-image-4.15.0-129-lowlatencyUpgrade linux-image-5.4.0-1033-gcpUpgrade linux-image-4.4.0-198-genericUpgrade linux-image-5.8.0-1019-kvmUpgrade linux-image-4.15.0-1094-snapdragonUpgrade linux-image-4.4.0-1143-raspi2Upgrade linux-image-4.15.0-1091-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-5.8.0-1021-oracleUpgrade linux-image-powerpc-smpUpgrade linux-image-5.6.0-1039-oemUpgrade linux-image-4.15.0-1103-azureUpgrade linux-image-5.8.0-1024-awsUpgrade linux-image-virtualUpgrade linux-image-5.8.0-1023-azureUpgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1062-oracleUpgrade linux-image-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.8.0-44-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-59-genericUpgrade linux-image-5.8.0-1016-raspi-nolpaeUpgrade linux-image-5.4.0-1031-kvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1077-gkeUpgrade linux-image-5.8.0-1023-gcpUpgrade linux-image-5.8.0-1016-raspiUpgrade linux-image-4.15.0-129-genericUpgrade linux-image-5.8.0-44-lowlatencyUpgrade linux-image-azureUpgrade linux-image-4.4.0-198-lowlatencyUpgrade linux-image-4.15.0-1077-raspi2Upgrade linux-image-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1034-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-129-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-4.4.0-198-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-1147-snapdragonUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-198-powerpc64-smpUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azure-lts-18.04 | Jan 6, 2021 | Nov 20, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 20, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub