PT-2020-4968 · Linux+8 · Linux Kernel+8

Minh Yuan

·

Published

2020-11-08

·

Updated

2021-05-28

·

CVE-2020-28974

CVSS v2.0

6.1

Medium

VectorAV:L/AC:L/Au:N/C:P/I:P/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.9.7
Description The issue is related to a slab-out-of-bounds read in the fbcon component of the Linux kernel. This occurs because the KD FONT OP COPY function in drivers/tty/vt/vt.c can be used for manipulations such as font height, allowing local attackers to read privileged information or potentially crash the kernel.
Recommendations For Linux kernel versions prior to 5.9.7, update to version 5.9.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the KD FONT OP COPY function in drivers/tty/vt/vt.c to minimize the risk of exploitation.

Exploit

Fix

Out of bounds Read

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2021:1578
ALT-PU-2020-3256
ALT-PU-2020-3262
ALT-PU-2020-3553
ALT-PU-2020-3570
ALT-PU-2021-1083
ALT-PU-2021-1105
ALT-PU-2021-1621
ALT-PU-2021-1656
ALT-PU-2021-1739
ALT-PU-2021-1862
ALT-PU-2021-1866
ALT-PU-2021-1870
BDU:2020-05544
CESA-2021_1578
CESA-2021_1739
CVE-2020-28974
DLA-2483-1
DLA-2494-1
MGASA-2021-0030
MGASA-2021-0031
OPENSUSE-SU-2020:2161-1
OPENSUSE-SU-2020:2193-1
OPENSUSE-SU-2020:2260-1
OPENSUSE-SU-2020_2161-1
OPENSUSE-SU-2020_2193-1
OPENSUSE-SU-2020_2260-1
OPENSUSE-SU-2021:0242-1
OPENSUSE-SU-2021_0242-1
RHSA-2021:1578
RHSA-2021:1739
RHSA-2021_1578
RHSA-2021_1739
SUSE-SU-2020:3522-1
SUSE-SU-2020:3713-1
SUSE-SU-2020:3714-1
SUSE-SU-2020:3715-1
SUSE-SU-2020:3717-1
SUSE-SU-2020:3718-1
SUSE-SU-2020:3748-1
SUSE-SU-2020:3766-1
SUSE-SU-2020:3798-1
SUSE-SU-2021:0434-1
SUSE-SU-2021:0437-1
SUSE-SU-2021:0438-1
SUSE-SU-2021:0452-1
SUSE-SU-2021:14630-1
SUSE-SU-2021_14630-1
USN-4679-1
USN-4680-1
USN-4681-1
USN-4683-1
USN-4751-1

Affected Products

Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Suse
Ubuntu