NetSight
IP …
high7.8

CVE-2022-49948

In the Linux kernel, the following vulnerability has been resolved: vt: Clear selection before changing the font When changing the console font with ioctl(KDFO…

Impact

In the Linux kernel, the following vulnerability has been resolved: vt: Clear selection before changing the font When changing the console font with ioctl(KDFONTOP) the new font size can be bigger than the previous font. A previous selection may thus now be outside of the new screen size and thus trigger out-of-bounds accesses to graphics memory if the selection is removed in vc_do_resize(). Prevent such out-of-memory accesses by dropping the selection before the various con_font_set() console handlers are called.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.9.328
from 4.10 before 4.14.293
from 4.15 before 4.19.258
from 4.20 before 5.4.213
from 5.5 before 5.10.142
from 5.11 before 5.15.66

Weakness classification

CWE-125

References