CVE-2022-48627

vt: fix memory overlapping when deleting chars in the buffer

Medium · published March 2, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
19.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

vt: fix memory overlapping when deleting chars in the buffer

A memory overlapping copy occurs when deleting a long line. This memory

overlapping copy can cause data corruption when scr_memcpyw is optimized

to memcpy because memcpy does not ensure its behavior if the destination

buffer overlaps with the source buffer. The line buffer is not always

broken, because the memcpy utilizes the hardware acceleration, whose

result is not deterministic.

Fix this problem by using replacing the scr_memcpyw with scr_memmovew.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00278 · 19.2th percentile
Published
2024-03-02T21:31Z
EPSS history
Timeline
  • 02 MAR 21:31Z
    vt: fix memory overlapping when deleting chars in the buffer
    cvelistv5