CVE-2024-50076

MediumCVSS 6.5/10Last modified Nov 5, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

vt: prevent kernel-infoleak in con_font_get()

font.data may not initialize all memory spaces depending on the implementation of vc->vc_sw->con_font_get. This may cause info-leak, so to prevent this, it is safest to modify it to initialize the allocated memory space to 0, and it generally does not affect the overall performance of the system.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-909

Affected software

VendorProductVersions
LinuxLinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < efc67cee700b89ffbdb74a0603a083ec1290ae31; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < dc794e878e6d79f75205be456b1042a289c5759d; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 1e5a17dc77d8a8bbe67040b32e2ef755901aba44; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < b3959d5eca136e0588f9af3867b34032160cb826; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 23c4cb8a56978e5b1baa171d42e616e316c2039d; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < dc2d5f02636c7587bdd6d1f60fc59c55860b00a4; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < adb1f312f38f0d2c928ceaff089262798cc260b4; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < f956052e00de211b5c9ebaa1958366c23f82ee9e
LinuxLinux2.6.12

References

Timeline

Published
Oct 29, 2024
Last modified
Nov 5, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-500775.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix multiple init when debugfs is disabled If bt_debugCVE-2024-500785.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Call iso_exit() on module unload If iso_init() has been calCVE-2024-500795.5In the Linux kernel, the following vulnerability has been resolved: io_uring/sqpoll: ensure task state is TASK_RUNNING when running task_woCVE-2024-50088.8In WhatsUp Gold versions released before 2023.1.3, an authenticated user with certain permissions can upload an arbitrary file and obtain CVE-2024-500805.5In the Linux kernel, the following vulnerability has been resolved: ublk: don't allow user copy for unprivileged device UBLK_F_USER_COPY rCVE-2024-500815.5In the Linux kernel, the following vulnerability has been resolved: blk-mq: setup queue ->tag_set before initializing hctx Commit 7b815817CVE-2024-500824.7In the Linux kernel, the following vulnerability has been resolved: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race We'CVE-2024-500837.5In the Linux kernel, the following vulnerability has been resolved: tcp: fix mptcp DSS corruption due to large pmtu xmit Syzkaller was ablCVE-2024-500845.5In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_testCVE-2024-500855.5In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow Syzkaller reCVE-2024-500867.0In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix user-after-free from session log off There is racy issue beCVE-2024-500875.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix uninitialized pointer free on read_alloc_one_name() error T
CVE-2024-50076: Medium severity, CVSS 6.5 | Vulnix