Updated: 2024-11-21 23:38:33.525158
Description:
A race problem was seen in the vt_k_ioctl in drivers/tty/vt/vt_ioctl.c in the Linux kernel, which may cause an out of bounds read in vt as the write access to vc_mode is not protected by lock-in vt_ioctl (KDSETMDE). The highest threat from this vulnerability is to data confidentiality.
Links | NIST | CIRCL | RHEL | Ubuntu |
Severity | Score | |
---|---|---|
CVSS Version 2.x | LOW | 1.9000000000000001 |
CVSS Version 3.x | MEDIUM | 4.7 |
OS name | Project name | Version | Score | Severity | Status | Errata | Last updated | Statement |
---|---|---|---|---|---|---|---|---|
AlmaLinux 9.2 ESU | kernel | 5.14.0 | 4.7 | MEDIUM | Ignored | 2023-11-21 04:12:23 | ||
CentOS 6 ELS | kernel | 2.6.32 | 4.7 | MEDIUM | Not Vulnerable | 2022-03-30 18:48:21 | ||
CentOS 7 ELS | kernel | 3.10.0 | 4.7 | MEDIUM | Ignored | 2023-09-19 09:30:03 | ||
CentOS 8.4 ELS | kernel | 4.18.0 | 4.7 | MEDIUM | Released | CLSA-2022:1651145959 | 2022-04-28 15:58:55 | |
CentOS 8.5 ELS | kernel | 4.18.0 | 4.7 | MEDIUM | Released | CLSA-2022:1651146021 | 2022-04-28 15:58:55 | |
CloudLinux 6 ELS | kernel | 2.6.32 | 4.7 | MEDIUM | Not Vulnerable | 2022-03-30 18:48:21 | ||
Oracle Linux 6 ELS | kernel | 2.6.32 | 4.7 | MEDIUM | Not Vulnerable | 2022-03-30 18:48:21 | ||
Ubuntu 16.04 ELS | linux | 4.4.0 | 4.7 | MEDIUM | Released | CLSA-2023:1690395161 | 2023-07-26 17:15:31 | |
Ubuntu 16.04 ELS | linux-hwe | 4.15.0 | 4.7 | MEDIUM | Already Fixed | 2023-07-17 11:09:16 | ||
Ubuntu 18.04 ELS | linux | 4.15.0 | 4.7 | MEDIUM | Ignored | 2023-03-02 04:04:08 |