Not rated
CVE-2020-14331 A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker…
Description
A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, calling an ioctl VT_RESIZE, which causes an out-of-bounds write to occur. This flaw allows a local user with access to the VGA console to crash the system, potentially escalating their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux kernel | Versions not published |
References
- www.openwall.com www.openwall.com
- lists.openwall.net lists.openwall.net
- bugzilla.redhat.com bugzilla.redhat.com
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2385-1] linux-4.19 security update lists.debian.org
- [debian-lts-announce] 20201030 [SECURITY] [DLA 2420-1] linux security update lists.debian.org
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2420-2] linux regression update lists.debian.org
Timeline
- Published
- Last modified
Other CVEs of Linux kernel
The 47 CVEs of Linux kernel →
CVE-2023-3220
An issue was discovered in the Linux kernel through 6.1-rc8
5.5
Medium
CVE-2023-1652
A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel
7.1
High
CVE-2023-1077
In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as…
Not rated
CVE-2023-1078
A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol
7.8
High