CVE-2024-35823

Summary

In the Linux kernel, the following vulnerability has been resolved:

vt: fix unicode buffer corruption when deleting characters

This is the same issue that was fixed for the VGA text buffer in commit 39cdb68c64d8 ("vt: fix memory overlapping when deleting chars in the buffer"). The cure is also the same i.e. replace memcpy() with memmove() due to the overlaping buffers.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux81732c3b2fede049a692e58a7ceabb6d18ffb18c < fc7dfe3d123f00e720be80b920da287810a1f37daffected
LinuxLinux81732c3b2fede049a692e58a7ceabb6d18ffb18c < ff7342090c1e8c5a37015c89822a68b275b46f8aaffected
LinuxLinux81732c3b2fede049a692e58a7ceabb6d18ffb18c < 1ce408f75ccf1e25b3fddef75cca878b55f2ac90affected
LinuxLinux81732c3b2fede049a692e58a7ceabb6d18ffb18c < 0190d19d7651c08abc187dac3819c61b726e7e3faffected
LinuxLinux81732c3b2fede049a692e58a7ceabb6d18ffb18c < 994a1e583c0c206c8ca7d03334a65b79f4d8bc51affected
LinuxLinux81732c3b2fede049a692e58a7ceabb6d18ffb18c < 7529cbd8b5f6697b369803fe1533612c039cabdaaffected
LinuxLinux81732c3b2fede049a692e58a7ceabb6d18ffb18c < 2933b1e4757a0a5c689cf48d80b1a2a85f237ff1affected
LinuxLinux81732c3b2fede049a692e58a7ceabb6d18ffb18c < 1581dafaf0d34bc9c428a794a22110d7046d186daffected
LinuxLinux3.7affected
LinuxLinux0 < 3.7unaffected
LinuxLinux4.19.312 <= 4.19.*unaffected
LinuxLinux5.4.274 <= 5.4.*unaffected
LinuxLinux5.10.215 <= 5.10.*unaffected
LinuxLinux5.15.154 <= 5.15.*unaffected
LinuxLinux6.1.84 <= 6.1.*unaffected
LinuxLinux6.6.24 <= 6.6.*unaffected
LinuxLinux6.7.12 <= 6.7.*unaffected
LinuxLinux6.8 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

Additional References

References