High
vt: Clear selection before changing the font
In the Linux kernel, the following vulnerability has been resolved: vt: Clear selection before changing the font When changing the console font with ioctl(KDFONTOP) the new font size can be bigger than the previous font. A previous selection may thus now be outside of the new screen size and thus trigger out-of-bounds accesses to graphics memory if the selection is removed in vc_do_resize(). Prevent such out-of-memory accesses by dropping the selection before the various con_font_set() console handlers are called.
Announced Group revision 1
Original source ↗CVE-2022-49948
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2022-49948
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "009e39ae44f4191188aeb6dfbf661b771dbbe515",
"lessThan": "c555cf04684fde39b5b0dd9fd80730030ee10c4a",
"versionType": "git"
},
{
"status": "affected",
"version": "009e39ae44f4191188aeb6dfbf661b771dbbe515",
"lessThan": "e9ba4611ddf676194385506222cce7b0844e708e",
"versionType": "git"
},
{
"status": "affected",
"version": "009e39ae44f4191188aeb6dfbf661b771dbbe515",
"lessThan": "f74b4a41c5d7c9522469917e3072e55d435efd9e",
"versionType": "git"
},
{
"status": "affected",
"version": "009e39ae44f4191188aeb6dfbf661b771dbbe515",
"lessThan": "1cf1930369c9dc428d827b60260c53271bff3285",
"versionType": "git"
},
{
"status": "affected",
"version": "009e39ae44f4191188aeb6dfbf661b771dbbe515",
"lessThan": "989201bb8c00b222235aff04e6200230d29dc7bb",
"versionType": "git"
},
{
"status": "affected",
"version": "009e39ae44f4191188aeb6dfbf661b771dbbe515",
"lessThan": "2535431ae967ad17585513649625fea7db28d4db",
"versionType": "git"
},
{
"status": "affected",
"version": "009e39ae44f4191188aeb6dfbf661b771dbbe515",
"lessThan": "c904fe03c4bd1f356a58797d39e2a5d0ca15cefc",
"versionType": "git"
},
{
"status": "affected",
"version": "009e39ae44f4191188aeb6dfbf661b771dbbe515",
"lessThan": "566f9c9f89337792070b5a6062dff448b3e7977f",
"versionType": "git"
},
{
"status": "affected",
"version": "e60f8fcce05042e8f8cea25ee81fecc1222114cf",
"versionType": "git"
},
{
"status": "affected",
"version": "5812a9bc9d68a82c2cc839f88e6f7a05093ab39d",
"versionType": "git"
},
{
"status": "affected",
"version": "863ad19fd654c485e3beec3575c4d74a1e74369e",
"versionType": "git"
},
{
"status": "affected",
"version": "dbc3fd44f957a39407e889287bf61fa0ef3ecc14",
"versionType": "git"
},
{
"status": "affected",
"version": "0b2a0a58ad22f9d6dfc641bc5ec46057493f22a5",
"versionType": "git"
},
{
"status": "affected",
"version": "9f2d48f0745f921040df91bfe8fa7f0339cd7497",
"versionType": "git"
},
{
"status": "affected",
"version": "3425e397fb23cc2e8e6fb8f5b8226dcb447e84dd",
"versionType": "git"
},
{
"status": "affected",
"version": "eeae0a12a16650ff494d5faefa371cd9e7079575",
"versionType": "git"
},
{
"status": "affected",
"version": "3.2.85",
"lessThan": "3.3",
"versionType": "semver"
},
{
"status": "affected",
"version": "3.10.105",
"lessThan": "3.11",
"versionType": "semver"
},
{
"status": "affected",
"version": "3.12.68",
"lessThan": "3.13",
"versionType": "semver"
},
{
"status": "affected",
"version": "3.16.40",
"lessThan": "3.17",
"versionType": "semver"
},
{
"status": "affected",
"version": "3.18.45",
"lessThan": "3.19",
"versionType": "semver"
},
{
"status": "affected",
"version": "4.1.36",
"lessThan": "4.2",
"versionType": "semver"
},
{
"status": "affected",
"version": "4.4.31",
"lessThan": "4.5",
"versionType": "semver"
},
{
"status": "affected",
"version": "4.8.7",
"lessThan": "4.9",
"versionType": "semver"
}
],
"programFiles": [
"drivers/tty/vt/vt.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "4.9"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "4.9",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "4.9.328",
"versionType": "semver",
"lessThanOrEqual": "4.9.*"
},
{
"status": "unaffected",
"version": "4.14.293",
"versionType": "semver",
"lessThanOrEqual": "4.14.*"
},
{
"status": "unaffected",
"version": "4.19.258",
"versionType": "semver",
"lessThanOrEqual": "4.19.*"
},
{
"status": "unaffected",
"version": "5.4.213",
"versionType": "semver",
"lessThanOrEqual": "5.4.*"
},
{
"status": "unaffected",
"version": "5.10.142",
"versionType": "semver",
"lessThanOrEqual": "5.10.*"
},
{
"status": "unaffected",
"version": "5.15.66",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "5.19.8",
"versionType": "semver",
"lessThanOrEqual": "5.19.*"
},
{
"status": "unaffected",
"version": "6.0",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"drivers/tty/vt/vt.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2022-49948
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #30195 · Revision 1
- Added to Heist Feed
- Publisher date