tty: vt: initialize unicode screen buffer
In the Linux kernel, the following vulnerability has been resolved: tty: vt: initialize unicode screen buffer syzbot reports kernel infoleak at vcs_read() [1], for buffer can be read immediately after resize operation. Initialize buffer using kzalloc(). ---------- #include #include #include #include int main(int argc, char *argv[]) { struct fb_var_screeninfo var = { }; const int fb_fd = open("/dev/fb0", 3); ioctl(fb_fd, FBIOGET_VSCREENINFO, &var); var.yres = 0x21; ioctl(fb_fd, FBIOPUT_VSCREENINFO, &var); return read(open("/dev/vcsu", O_RDONLY), &var, sizeof(var)) == -1; } ----------
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 4.19.256, 5.10.137, 5.15.61, 5.18.18, 5.19.2, 5.4.211
- CVEs
- CVE-2022-50222
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 5 Nov 2026, 17:58 UTC · Revision 1
Source evidence
In the Linux kernel, the following vulnerability has been resolved: tty: vt: initialize unicode screen buffer syzbot reports kernel infoleak at vcs_read() [1], for buffer can be read immediately after resize operation. Initialize buffer using kzalloc(). ---------- #include #include #include #include int main(int argc, char *argv[]) { struct fb_var_screeninfo var = { }; const int fb_fd = open("/dev/fb0", 3); ioctl(fb_fd, FBIOGET_VSCREENINFO, &var); var.yres = 0x21; ioctl(fb_fd, FBIOPUT_VSCREENINFO, &var); return read(open("/dev/vcsu", O_RDONLY), &var, sizeof(var)) == -1; } ----------
osv:CVE-2022-50222
Kernel
Fixed versions: 4.19.256, 5.4.211, 5.10.137, 5.15.61, 5.18.18, 5.19.2
Complete source record
{
"id": "8d4cd3edada8ac91b1f4eb18caff22ffda54c2586d82f3d4b267b14ba1245135",
"url": "https://osv.dev/vulnerability/CVE-2022-50222",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "tty: vt: initialize unicode screen buffer",
"summary": "In the Linux kernel, the following vulnerability has been resolved: tty: vt: initialize unicode screen buffer syzbot reports kernel infoleak at vcs_read() [1], for buffer can be read immediately after resize operation. Initialize buffer using kzalloc(). ---------- #include #include #include #include int main(int argc, char *argv[]) { struct fb_var_screeninfo var = { }; const int fb_fd = open(\"/dev/fb0\", 3); ioctl(fb_fd, FBIOGET_VSCREENINFO, &var); var.yres = 0x21; ioctl(fb_fd, FBIOPUT_VSCREENINFO, &var); return read(open(\"/dev/vcsu\", O_RDONLY), &var, sizeof(var)) == -1; } ----------",
"evidence": "osv:CVE-2022-50222",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.19.256",
"evidence": "/affected/1/ranges"
},
{
"value": "5.4.211",
"evidence": "/affected/1/ranges"
},
{
"value": "5.10.137",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.61",
"evidence": "/affected/1/ranges"
},
{
"value": "5.18.18",
"evidence": "/affected/1/ranges"
},
{
"value": "5.19.2",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CVE-2022-50222",
"aliases": [
"CVE-2022-50222"
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "d8ae7242718738ee1bf9bfdd632d2a4b150fdd26"
},
{
"fixed": "e02fa87e572bb7d90dcdbce9c0f519f1eb992e96"
},
{
"fixed": "cc9e874dace0c89ae535230c7da19b764746811e"
},
{
"fixed": "5c6c65681f39bf71bc72ed589dec3b8b20e75cac"
},
{
"fixed": "446f123aa6021e5f75a20789f05ff3f7ae51a42f"
},
{
"fixed": "777a462e1ae50a01fc4a871efa8e34d596a1e17d"
},
{
"fixed": "e0ef23e9b0ad18b9fd3741b0f1ad2282e4a18def"
},
{
"fixed": "af77c56aa35325daa2bc2bed5c2ebf169be61b86"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50222.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.19.0"
},
{
"fixed": "4.19.256"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.20.0"
},
{
"fixed": "5.4.211"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.5.0"
},
{
"fixed": "5.10.137"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.61"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "5.18.18"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.19.0"
},
{
"fixed": "5.19.2"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50222.json"
}
}
],
"modified": "2026-10-28T02:30:44.932611577Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/446f123aa6021e5f75a20789f05ff3f7ae51a42f",
"https://git.kernel.org/stable/c/5c6c65681f39bf71bc72ed589dec3b8b20e75cac",
"https://git.kernel.org/stable/c/777a462e1ae50a01fc4a871efa8e34d596a1e17d",
"https://git.kernel.org/stable/c/af77c56aa35325daa2bc2bed5c2ebf169be61b86",
"https://git.kernel.org/stable/c/cc9e874dace0c89ae535230c7da19b764746811e",
"https://git.kernel.org/stable/c/e02fa87e572bb7d90dcdbce9c0f519f1eb992e96",
"https://git.kernel.org/stable/c/e0ef23e9b0ad18b9fd3741b0f1ad2282e4a18def",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50222.json",
"https://nvd.nist.gov/vuln/detail/CVE-2022-50222",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50222.json"
}
},
"related_cves": [
{
"value": "CVE-2022-50222",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 512603,
"published_at": "2025-06-18T11:03:56.744+00:00"
}