Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-47383
HistoryMay 21, 2024 - 12:00 a.m.

CVE-2021-47383

2024-05-2100:00:00
ubuntu.com
ubuntu.com
2
linux kernel
cve-2021-47383
vulnerability
tty
out-of-bound access
imageblit
fbioput_vscreeninfo
ioctl
fb_var_screeninfo
resize_screen
fbcon_display
unix

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.2%

In the Linux kernel, the following vulnerability has been resolved: tty:
Fix out-of-bound vmalloc access in imageblit This issue happens when a
userspace program does an ioctl FBIOPUT_VSCREENINFO passing the
fb_var_screeninfo struct containing only the fields xres, yres, and
bits_per_pixel with values. If this struct is the same as the previous
ioctl, the vc_resize() detects it and doesn’t call the resize_screen(),
leaving the fb_var_screeninfo incomplete. And this leads to the
updatescrollmode() calculates a wrong value to fbcon_display->vrows, which
makes the real_y() return a wrong value of y, and that value, eventually,
causes the imageblit to access an out-of-bound address value. To solve this
issue I made the resize_screen() be called even if the screen does not need
any resizing, so it will “fix and fill” the fb_var_screeninfo
independently.

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.2%