Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Sirius

Researcher fromUbisectech
#45527of 53,624
5.5Total CVSS
Vulnerabilities · 1
PT-2024-7729
5.5
2024-02-19
Linux · Linux Kernel · CVE-2024-26798
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to the fbcon component of the Linux kernel, where an error in resource management within the `fbcon do set font()` function can lead to a system crash. This can be triggered when the `vc resize()` function fails, particularly affecting system or internal fonts that are not restored properly. The vulnerability can be exploited to cause a denial of service, and it has been demonstrated by Sirius using Syzkaller to crash the system on the next invocation of `font get()`. The issue is challenging to reproduce but can be aided by fault injection. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.