cve-2024-50076
Vulnerability from cvelistv5
Published
2024-10-29 00:50
Modified
2024-12-19 09:32
Severity ?
EPSS score ?
Summary
In the Linux kernel, the following vulnerability has been resolved:
vt: prevent kernel-infoleak in con_font_get()
font.data may not initialize all memory spaces depending on the implementation
of vc->vc_sw->con_font_get. This may cause info-leak, so to prevent this, it
is safest to modify it to initialize the allocated memory space to 0, and it
generally does not affect the overall performance of the system.
References
Impacted products
| Vendor | Product | Version | |||||
|---|---|---|---|---|---|---|---|
| ▼ | Linux | Linux |
Version: 05e2600cb0a4d73b0779cf29512819616252aeeb Version: 05e2600cb0a4d73b0779cf29512819616252aeeb Version: 05e2600cb0a4d73b0779cf29512819616252aeeb Version: 05e2600cb0a4d73b0779cf29512819616252aeeb Version: 05e2600cb0a4d73b0779cf29512819616252aeeb Version: 05e2600cb0a4d73b0779cf29512819616252aeeb Version: 05e2600cb0a4d73b0779cf29512819616252aeeb Version: 05e2600cb0a4d73b0779cf29512819616252aeeb |
||||
|
|||||||
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Linux",
"programFiles": [
"drivers/tty/vt/vt.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"lessThan": "efc67cee700b89ffbdb74a0603a083ec1290ae31",
"status": "affected",
"version": "05e2600cb0a4d73b0779cf29512819616252aeeb",
"versionType": "git"
},
{
"lessThan": "dc794e878e6d79f75205be456b1042a289c5759d",
"status": "affected",
"version": "05e2600cb0a4d73b0779cf29512819616252aeeb",
"versionType": "git"
},
{
"lessThan": "1e5a17dc77d8a8bbe67040b32e2ef755901aba44",
"status": "affected",
"version": "05e2600cb0a4d73b0779cf29512819616252aeeb",
"versionType": "git"
},
{
"lessThan": "b3959d5eca136e0588f9af3867b34032160cb826",
"status": "affected",
"version": "05e2600cb0a4d73b0779cf29512819616252aeeb",
"versionType": "git"
},
{
"lessThan": "23c4cb8a56978e5b1baa171d42e616e316c2039d",
"status": "affected",
"version": "05e2600cb0a4d73b0779cf29512819616252aeeb",
"versionType": "git"
},
{
"lessThan": "dc2d5f02636c7587bdd6d1f60fc59c55860b00a4",
"status": "affected",
"version": "05e2600cb0a4d73b0779cf29512819616252aeeb",
"versionType": "git"
},
{
"lessThan": "adb1f312f38f0d2c928ceaff089262798cc260b4",
"status": "affected",
"version": "05e2600cb0a4d73b0779cf29512819616252aeeb",
"versionType": "git"
},
{
"lessThan": "f956052e00de211b5c9ebaa1958366c23f82ee9e",
"status": "affected",
"version": "05e2600cb0a4d73b0779cf29512819616252aeeb",
"versionType": "git"
}
]
},
{
"defaultStatus": "affected",
"product": "Linux",
"programFiles": [
"drivers/tty/vt/vt.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"status": "affected",
"version": "6.3"
},
{
"lessThan": "6.3",
"status": "unaffected",
"version": "0",
"versionType": "semver"
},
{
"lessThanOrEqual": "4.19.*",
"status": "unaffected",
"version": "4.19.323",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.4.*",
"status": "unaffected",
"version": "5.4.285",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"version": "5.10.229",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"version": "5.15.171",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.1.*",
"status": "unaffected",
"version": "6.1.116",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.6.*",
"status": "unaffected",
"version": "6.6.58",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.11.*",
"status": "unaffected",
"version": "6.11.5",
"versionType": "semver"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "6.12",
"versionType": "original_commit_for_fix"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvt: prevent kernel-infoleak in con_font_get()\n\nfont.data may not initialize all memory spaces depending on the implementation\nof vc-\u003evc_sw-\u003econ_font_get. This may cause info-leak, so to prevent this, it\nis safest to modify it to initialize the allocated memory space to 0, and it\ngenerally does not affect the overall performance of the system."
}
],
"providerMetadata": {
"dateUpdated": "2024-12-19T09:32:32.582Z",
"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"shortName": "Linux"
},
"references": [
{
"url": "https://git.kernel.org/stable/c/efc67cee700b89ffbdb74a0603a083ec1290ae31"
},
{
"url": "https://git.kernel.org/stable/c/dc794e878e6d79f75205be456b1042a289c5759d"
},
{
"url": "https://git.kernel.org/stable/c/1e5a17dc77d8a8bbe67040b32e2ef755901aba44"
},
{
"url": "https://git.kernel.org/stable/c/b3959d5eca136e0588f9af3867b34032160cb826"
},
{
"url": "https://git.kernel.org/stable/c/23c4cb8a56978e5b1baa171d42e616e316c2039d"
},
{
"url": "https://git.kernel.org/stable/c/dc2d5f02636c7587bdd6d1f60fc59c55860b00a4"
},
{
"url": "https://git.kernel.org/stable/c/adb1f312f38f0d2c928ceaff089262798cc260b4"
},
{
"url": "https://git.kernel.org/stable/c/f956052e00de211b5c9ebaa1958366c23f82ee9e"
}
],
"title": "vt: prevent kernel-infoleak in con_font_get()",
"x_generator": {
"engine": "bippy-5f407fcff5a0"
}
}
},
"cveMetadata": {
"assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"assignerShortName": "Linux",
"cveId": "CVE-2024-50076",
"datePublished": "2024-10-29T00:50:18.349Z",
"dateReserved": "2024-10-21T19:36:19.940Z",
"dateUpdated": "2024-12-19T09:32:32.582Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2024-50076\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-10-29T01:15:04.697\",\"lastModified\":\"2024-11-08T16:15:45.873\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nvt: prevent kernel-infoleak in con_font_get()\\n\\nfont.data may not initialize all memory spaces depending on the implementation\\nof vc-\u003evc_sw-\u003econ_font_get. This may cause info-leak, so to prevent this, it\\nis safest to modify it to initialize the allocated memory space to 0, and it\\ngenerally does not affect the overall performance of the system.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: vt: prevent kernel-infoleak en con_font_get() font.data puede no inicializar todos los espacios de memoria dependiendo de la implementaci\u00f3n de vc-\u0026gt;vc_sw-\u0026gt;con_font_get. Esto puede causar una fuga de informaci\u00f3n, por lo que para evitarlo, es m\u00e1s seguro modificarlo para inicializar el espacio de memoria asignado a 0 y, por lo general, no afecta el rendimiento general del sistema.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-909\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.3\",\"versionEndExcluding\":\"6.6.58\",\"matchCriteriaId\":\"591A1F12-B1AF-4766-A668-EF6389C97C28\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.11.5\",\"matchCriteriaId\":\"6E62D61A-F704-44DB-A311-17B7534DA7BC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F361E1D-580F-4A2D-A509-7615F73167A1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"925478D0-3E3D-4E6F-ACD5-09F28D5DF82C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"3C95E234-D335-4B6C-96BF-E2CEBD8654ED\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/1e5a17dc77d8a8bbe67040b32e2ef755901aba44\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/23c4cb8a56978e5b1baa171d42e616e316c2039d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/adb1f312f38f0d2c928ceaff089262798cc260b4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b3959d5eca136e0588f9af3867b34032160cb826\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/dc2d5f02636c7587bdd6d1f60fc59c55860b00a4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/dc794e878e6d79f75205be456b1042a289c5759d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/efc67cee700b89ffbdb74a0603a083ec1290ae31\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/f956052e00de211b5c9ebaa1958366c23f82ee9e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}"
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.