Riskcovery

CVE-2022-49948

vt: Clear selection before changing the font

State
Published
Severity
7.8 High
Published
Jun 18, 2025
Updated
Oct 15, 2026
Reserved
Jun 18, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

vt: Clear selection before changing the font

When changing the console font with ioctl(KDFONTOP) the new font size can be bigger than the previous font. A previous selection may thus now be outside of the new screen size and thus trigger out-of-bounds accesses to graphics memory if the selection is removed in vc_do_resize().

Prevent such out-of-memory accesses by dropping the selection before the various con_font_set() console handlers are called.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 009e39ae44f4191188aeb6dfbf661b771dbbe515 to before c555cf04684fde39b5b0dd9fd80730030ee10c4aAffected
  • 009e39ae44f4191188aeb6dfbf661b771dbbe515 to before e9ba4611ddf676194385506222cce7b0844e708eAffected
  • 009e39ae44f4191188aeb6dfbf661b771dbbe515 to before f74b4a41c5d7c9522469917e3072e55d435efd9eAffected
  • 009e39ae44f4191188aeb6dfbf661b771dbbe515 to before 1cf1930369c9dc428d827b60260c53271bff3285Affected
  • 009e39ae44f4191188aeb6dfbf661b771dbbe515 to before 989201bb8c00b222235aff04e6200230d29dc7bbAffected
  • 009e39ae44f4191188aeb6dfbf661b771dbbe515 to before 2535431ae967ad17585513649625fea7db28d4dbAffected
  • 009e39ae44f4191188aeb6dfbf661b771dbbe515 to before c904fe03c4bd1f356a58797d39e2a5d0ca15cefcAffected
  • 009e39ae44f4191188aeb6dfbf661b771dbbe515 to before 566f9c9f89337792070b5a6062dff448b3e7977fAffected
  • e60f8fcce05042e8f8cea25ee81fecc1222114cfAffected
  • 5812a9bc9d68a82c2cc839f88e6f7a05093ab39dAffected
  • 863ad19fd654c485e3beec3575c4d74a1e74369eAffected
  • dbc3fd44f957a39407e889287bf61fa0ef3ecc14Affected
  • 0b2a0a58ad22f9d6dfc641bc5ec46057493f22a5Affected
  • 9f2d48f0745f921040df91bfe8fa7f0339cd7497Affected
  • 3425e397fb23cc2e8e6fb8f5b8226dcb447e84ddAffected
  • eeae0a12a16650ff494d5faefa371cd9e7079575Affected
  • 3.2.85 to before 3.3Affected
  • 3.10.105 to before 3.11Affected
  • 3.12.68 to before 3.13Affected
  • 3.16.40 to before 3.17Affected
  • 3.18.45 to before 3.19Affected
  • 4.1.36 to before 4.2Affected
  • 4.4.31 to before 4.5Affected
  • 4.8.7 to before 4.9Affected
LinuxLinux
  • 4.9Affected
  • before 4.9Not affected
  • 4.9.328 through 4.9.*Not affected
  • 4.14.293 through 4.14.*Not affected
  • 4.19.258 through 4.19.*Not affected
  • 5.4.213 through 5.4.*Not affected
  • 5.10.142 through 5.10.*Not affected
  • 5.15.66 through 5.15.*Not affected
  • 5.19.8 through 5.19.*Not affected
  • 6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.