PT-2024-33908 · Linux+5 · Linux Kernel+5

Published

2024-10-11

·

Updated

2026-03-14

·

CVE-2024-50076

CVSS v2.0

6.8

Medium

VectorAV:N/AC:L/Au:S/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: A kernel-infoleak issue has been identified in the Linux kernel, specifically in the con font get() function. The font.data may not initialize all memory spaces, depending on the implementation of vc->vc sw->con font get(), potentially causing an info-leak. To prevent this, the allocated memory space is initialized to 0, which does not significantly affect the system's overall performance.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-909

Related Identifiers

ALT-PU-2024-17211
ALT-PU-2025-12647
AZL-52089
BDU:2025-03283
CVE-2024-50076
OESA-2024-2367
OPENSUSE-SU-2024:14500-1
OPENSUSE-SU-2024_3984-1
OPENSUSE-SU-2024_3986-1
OPENSUSE-SU-2025:14705-1
SUSE-SU-2024:3984-1
SUSE-SU-2024:3986-1
SUSE-SU-2024:4318-1
SUSE-SU-2024:4387-1
SUSE-SU-2025:20163-1
SUSE-SU-2025:20164-1
SUSE-SU-2025:20246-1
SUSE-SU-2025:20247-1
USN-7276-1
USN-7277-1
USN-7310-1
USN-7383-1
USN-7383-2
USN-7384-1
USN-7384-2
USN-7385-1
USN-7386-1
USN-7403-1
USN-7451-1
USN-7468-1
USN-7523-1
USN-7524-1

Affected Products

Alt Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu