CVE-2022-50222

tty: vt: initialize unicode screen buffer

published June 18, 2025

CVSS
—
EPSS
0%
Percentile
13.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

tty: vt: initialize unicode screen buffer

syzbot reports kernel infoleak at vcs_read() [1], for buffer can be read

immediately after resize operation. Initialize buffer using kzalloc().

----------

#include <fcntl.h>

#include <unistd.h>

#include <sys/ioctl.h>

#include <linux/fb.h>

int main(int argc, char *argv[])

{

struct fb_var_screeninfo var = { };

const int fb_fd = open("/dev/fb0", 3);

ioctl(fb_fd, FBIOGET_VSCREENINFO, &var);

var.yres = 0x21;

ioctl(fb_fd, FBIOPUT_VSCREENINFO, &var);

return read(open("/dev/vcsu", O_RDONLY), &var, sizeof(var)) == -1;

}

----------

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00236 · 13.8th percentile
Published
2025-06-18T11:03Z
EPSS history
Timeline
  • 18 JUN 11:03Z
    tty: vt: initialize unicode screen buffer
    cvelistv5