CVE-2024-35823
MEDIUMLinux Kernel < 4.19.312 - Buffer Overflow
Title source: ruleDescription
In the Linux kernel, the following vulnerability has been resolved: vt: fix unicode buffer corruption when deleting characters This is the same issue that was fixed for the VGA text buffer in commit 39cdb68c64d8 ("vt: fix memory overlapping when deleting chars in the buffer"). The cure is also the same i.e. replace memcpy() with memmove() due to the overlaping buffers.
References (10)
Scores
CVSS v3
5.3
EPSS
0.0027
EPSS Percentile
50.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Classification
CWE
CWE-120
Status
published
Affected Products (15)
linux/linux_kernel
< 4.19.312
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
debian/debian_linux
linux/Kernel
< 4.19.312linux
linux/Kernel
< 5.4.274linux
linux/Kernel
< 5.10.215linux
linux/Kernel
< 5.15.154linux
linux/Kernel
< 6.1.84linux
linux/Kernel
< 6.6.24linux
linux/Kernel
< 6.7.12linux
Timeline
Published
May 17, 2024
Tracked Since
Feb 18, 2026