CVE-2024-35823CWE-120

CVE-2024-35823

Medium · published May 17, 2024

CVSS v3.1
5.3
EPSS
1%
Percentile
59.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

vt: fix unicode buffer corruption when deleting characters

This is the same issue that was fixed for the VGA text buffer in commit

39cdb68c64d8 ("vt: fix memory overlapping when deleting chars in the

buffer"). The cure is also the same i.e. replace memcpy() with memmove()

due to the overlaping buffers.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00915 · 59.8th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2024-05-17T18:15Z
Affected products (14)
ProductVersionsFixed in
linux/linux_kernel≥ 3.7, < 4.19.3124.19.312
linux/linux_kernel≥ 4.20, < 5.4.2745.4.274
linux/linux_kernel≥ 5.5, < 5.10.2155.10.215
linux/linux_kernel≥ 5.11, < 5.15.1545.15.154
linux/linux_kernel≥ 5.16, < 6.1.846.1.84
linux/linux_kernel≥ 6.2, < 6.6.246.6.24
linux/linux_kernel≥ 6.7, < 6.7.126.7.12
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
debian/debian_linuxall versions—
References (19)
https://git.kernel.org/stable/c/0190d19d7651c08abc187dac3819c61b726e7e3f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/1581dafaf0d34bc9c428a794a22110d7046d186d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/1ce408f75ccf1e25b3fddef75cca878b55f2ac90 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/2933b1e4757a0a5c689cf48d80b1a2a85f237ff1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7529cbd8b5f6697b369803fe1533612c039cabda · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/994a1e583c0c206c8ca7d03334a65b79f4d8bc51 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/fc7dfe3d123f00e720be80b920da287810a1f37d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ff7342090c1e8c5a37015c89822a68b275b46f8a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/0190d19d7651c08abc187dac3819c61b726e7e3f · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/1581dafaf0d34bc9c428a794a22110d7046d186d · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/1ce408f75ccf1e25b3fddef75cca878b55f2ac90 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/2933b1e4757a0a5c689cf48d80b1a2a85f237ff1 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/7529cbd8b5f6697b369803fe1533612c039cabda · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/994a1e583c0c206c8ca7d03334a65b79f4d8bc51 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/fc7dfe3d123f00e720be80b920da287810a1f37d · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/ff7342090c1e8c5a37015c89822a68b275b46f8a · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-265688.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 17 MAY 13:23Z
    vt: fix unicode buffer corruption when deleting characters
    cvelistv5