CVE-2024-50076 Information

Description

In the Linux kernel the following vulnerability has been resolved:

vt: prevent kernel-infoleak in con_font_get()

font.data may not initialize all memory spaces depending on the implementation of vc->vc_sw->con_font_get. This may cause info-leak so to prevent this it is safest to modify it to initialize the allocated memory space to 0 and it generally does not affect the overall performance of the system.

Reference

https://git.kernel.org/stable/c/dc2d5f02636c7587bdd6d1f60fc59c55860b00a4 https://git.kernel.org/stable/c/adb1f312f38f0d2c928ceaff089262798cc260b4 https://git.kernel.org/stable/c/f956052e00de211b5c9ebaa1958366c23f82ee9e

Share on: