CVEvulnerability
CVE-2024-50076
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-10-29
- Last modified
- 2026-06-17
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-909
Description
In the Linux kernel, the following vulnerability has been resolved:
vt: prevent kernel-infoleak in con_font_get()
font.data may not initialize all memory spaces depending on the implementation
of vc->vc_sw->con_font_get. This may cause info-leak, so to prevent this, it
is safest to modify it to initialize the allocated memory space to 0, and it
generally does not affect the overall performance of the system.
Affected configurations
• linux linux kernel (>= 6.3 < 6.6.58)
• linux linux kernel (>= 6.7 < 6.11.5)
• linux linux kernel 6.12
Related
Weakness · CWE (1)
- CWE-909 Missing Initialization of Resource weakness
References
- https://git.kernel.org/stable/c/1e5a17dc77d8a8bbe67040b32e2ef755901aba44 git.kernel.org
- https://git.kernel.org/stable/c/23c4cb8a56978e5b1baa171d42e616e316c2039d git.kernel.org
- https://git.kernel.org/stable/c/adb1f312f38f0d2c928ceaff089262798cc260b4 Patch
- https://git.kernel.org/stable/c/b3959d5eca136e0588f9af3867b34032160cb826 git.kernel.org
- https://git.kernel.org/stable/c/dc2d5f02636c7587bdd6d1f60fc59c55860b00a4 Patch
- https://git.kernel.org/stable/c/dc794e878e6d79f75205be456b1042a289c5759d git.kernel.org
- https://git.kernel.org/stable/c/efc67cee700b89ffbdb74a0603a083ec1290ae31 git.kernel.org
- https://git.kernel.org/stable/c/f956052e00de211b5c9ebaa1958366c23f82ee9e Patch