CVE-2024-50076

vt: prevent kernel-infoleak in con_font_get()

State: Published
Severity: Not scored
Published: Oct 29, 2024
Updated: May 11, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

vt: prevent kernel-infoleak in con_font_get()

font.data may not initialize all memory spaces depending on the implementation of vc->vc_sw->con_font_get. This may cause info-leak, so to prevent this, it is safest to modify it to initialize the allocated memory space to 0, and it generally does not affect the overall performance of the system.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before efc67cee700b89ffbdb74a0603a083ec1290ae31Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before dc794e878e6d79f75205be456b1042a289c5759dAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1e5a17dc77d8a8bbe67040b32e2ef755901aba44Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b3959d5eca136e0588f9af3867b34032160cb826Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 23c4cb8a56978e5b1baa171d42e616e316c2039dAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before dc2d5f02636c7587bdd6d1f60fc59c55860b00a4Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before adb1f312f38f0d2c928ceaff089262798cc260b4Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f956052e00de211b5c9ebaa1958366c23f82ee9eAffected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 4.19.323 through 4.19.Not affected 5.4.285 through 5.4.Not affected 5.10.229 through 5.10.Not affected 5.15.171 through 5.15.Not affected 6.1.116 through 6.1.Not affected 6.6.58 through 6.6.Not affected 6.11.5 through 6.11.*Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before efc67cee700b89ffbdb74a0603a083ec1290ae31Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before dc794e878e6d79f75205be456b1042a289c5759dAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1e5a17dc77d8a8bbe67040b32e2ef755901aba44Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b3959d5eca136e0588f9af3867b34032160cb826Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 23c4cb8a56978e5b1baa171d42e616e316c2039dAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before dc2d5f02636c7587bdd6d1f60fc59c55860b00a4Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before adb1f312f38f0d2c928ceaff089262798cc260b4Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f956052e00de211b5c9ebaa1958366c23f82ee9eAffected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
4.19.323 through 4.19.*Not affected
5.4.285 through 5.4.*Not affected
5.10.229 through 5.10.*Not affected
5.15.171 through 5.15.*Not affected
6.1.116 through 6.1.*Not affected
6.6.58 through 6.6.*Not affected
6.11.5 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.