PT-2025-25874

CVE-2022-49948

·

Published

2022-08-30

·

Updated

2026-10-21

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue arises when changing the console font with ioctl(KDFONTOP), where the new font size can be larger than the previous one. This can lead to out-of-bounds accesses to graphics memory if a previous selection is removed in vc do resize(). The problem occurs because the previous selection may now be outside of the new screen size.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
CLSA-2025-1766599987
CLSA-2025-1766600619
CLSA-2025-1766617167
CLSA-2026-1768775579
CLSA-2026-1775779453
CLSA-2026-1777616064
CLSA-2026-1780132980
OESA-2025-1820
SUSE-SU-2025:02264-1
SUSE-SU-2025_02264-1
SUSE-SU-2025:02308-1
SUSE-SU-2025_02308-1
SUSE-SU-2025:02320-1
SUSE-SU-2025:02321-1
SUSE-SU-2025:02322-1
SUSE-SU-2025:02537-1
SUSE-SU-2025_02537-1
SUSE-SU-2025:02846-1
SUSE-SU-2025_02846-1
SUSE-SU-2025:2264-1
Found an issue in the description? Have something to add? Feel free to write us 👾