CVE-2024-50076

Katalog CVE

CVSS 6.5 · Medium EPSS 0,61%

Kerentanan Missing Initialization of Resource pada linux kernel. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: vt: prevent kernel-infoleak in con_font_get() font.data may not initialize all memory spaces depending on the implementation of vc->vc_sw->con_font_get. This may cause info-leak, so to prevent this, it is safest to modify it to initialize the allocated memory space to 0, and it generally does not affect the overall performance of the system.

Rincian

Terbit di NVD

29 Oktober 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-909: Missing Initialization of Resource

EPSS (30 hari)

0,61% peluang dieksploitasi; lebih tinggi dari 47,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/adb1f312f38f0d2c928ceaff089262798cc260b4 patch
• https://git.kernel.org/stable/c/dc2d5f02636c7587bdd6d1f60fc59c55860b00a4 patch
• https://git.kernel.org/stable/c/f956052e00de211b5c9ebaa1958366c23f82ee9e patch
• https://git.kernel.org/stable/c/1e5a17dc77d8a8bbe67040b32e2ef755901aba44
• https://git.kernel.org/stable/c/23c4cb8a56978e5b1baa171d42e616e316c2039d
• https://git.kernel.org/stable/c/b3959d5eca136e0588f9af3867b34032160cb826
• https://git.kernel.org/stable/c/dc794e878e6d79f75205be456b1042a289c5759d
• https://git.kernel.org/stable/c/efc67cee700b89ffbdb74a0603a083ec1290ae31