Summary
It was discovered that the virtual terminal driver in the Linux kernel did
not properly handle VGA console font changes, leading to an out-of-bounds
write. A local attacker could use this to cause a denial of service (system
crash) or possibly execute arbitrary code.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | linux | 4.15.0-192.203 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-azure-4.15 | 4.15.0-1150.165 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-dell300x | 4.15.0-1052.57 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gcp-4.15 | 4.15.0-1135.151 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-kvm | 4.15.0-1126.131 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-snapdragon | 4.15.0-1136.146 |
Vulnerabilities 1
-
Unscored —
When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.
References
-
report
https://ubuntu.com/security/CVE-2021-33656