CVE-2020-8649

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.5.2

Description The issue is related to a use-after-free vulnerability in the vgacon invert region function, located in drivers/video/console/vgacon.c. This vulnerability may allow an attacker to disclose protected information or cause a denial of service.

Recommendations For Linux kernel versions through 5.5.2, update to a version newer than 5.5.2 to resolve the issue. As a temporary workaround, consider restricting access to the vgacon invert region function in drivers/video/console/vgacon.c until a patch is available.