IM
IronMonkey Threat Research

CVE-2024-35823 MEDIUM

Published: 2024-05-17 | Last Modified: 2026-05-12 | Status: Modified

Description

In the Linux kernel, the following vulnerability has been resolved: vt: fix unicode buffer corruption when deleting characters This is the same issue that was fixed for the VGA text buffer in commit 39cdb68c64d8 ("vt: fix memory overlapping when deleting chars in the buffer"). The cure is also the same i.e. replace memcpy() with memmove() due to the overlaping buffers.

Additional Descriptions (1)

En el kernel de Linux, se resolvió la siguiente vulnerabilidad: vt: corregida la corrupción del búfer Unicode al eliminar caracteres. Este es el mismo problema que se solucionó para el búfer de texto VGA en la confirmación 39cdb68c64d8 ("vt: corrige la superposición de memoria al eliminar caracteres en el búfer "). La solución también es la misma, es decir, reemplazar memcpy() con memmove() debido a la superposición de buffers.

CVSS Metrics

Base Score: 5.3 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactLOW

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Type: Secondary

Exploitability Score: 3.9

Impact Score: 1.4

Weaknesses

Source Type Description
134c704f-9b21-4f2e-91b3-4a467353bcc0 Secondary
en CWE-120

Affected Products

Vendor Product Version Update Type
linux linux_kernel * <built-in method update of dict object at 0x7fd30868aec0> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd31b2f7840> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd36b57eb00> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd38499d8c0> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd30868acc0> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd30868b4c0> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd319e53f00> Operating System
linux linux_kernel 6.8 <built-in method update of dict object at 0x7fd39c406400> Operating System
linux linux_kernel 6.8 <built-in method update of dict object at 0x7fd3401e6940> Operating System
linux linux_kernel 6.8 <built-in method update of dict object at 0x7fd30868a6c0> Operating System
linux linux_kernel 6.8 <built-in method update of dict object at 0x7fd39c407740> Operating System
linux linux_kernel 6.8 <built-in method update of dict object at 0x7fd39c406e80> Operating System
linux linux_kernel 6.8 <built-in method update of dict object at 0x7fd3408cb1c0> Operating System
debian debian_linux 10.0 <built-in method update of dict object at 0x7fd38499c3c0> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.8:rc6:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

References