CVE-2022-49948
BaseFortify
Publication date: 2025-06-18
Last updated on: 2025-11-14
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
| linux | linux_kernel | 6.0 |
| linux | linux_kernel | 6.0 |
| linux | linux_kernel | 6.0 |
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-125 | The product reads data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability occurs in the Linux kernel's virtual terminal (vt) subsystem when changing the console font using ioctl(KDFONTOP). If the new font size is larger than the previous one, a previously made selection may fall outside the new screen size. This can cause out-of-bounds accesses to graphics memory when the selection is removed during screen resizing (vc_do_resize()). The fix involves clearing the selection before changing the font to prevent such out-of-memory accesses.
How can this vulnerability impact me? :
The vulnerability can lead to out-of-bounds memory accesses in the graphics memory of the Linux console, which may cause system instability, crashes, or potentially allow an attacker to exploit the memory corruption for further attacks.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update the Linux kernel to a version where the issue has been resolved. The fix involves clearing the selection before changing the console font to prevent out-of-bounds accesses. Applying the latest kernel patches or updates that address this issue is recommended.