CVE-2026-49416

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description The CONS HISTORY ioctl handler fails to properly validate the requested history size. Providing a large value leads to an integer overflow during the buffer size calculation, which results in a heap allocation smaller than required. This allows an unprivileged local user with access to a vt(4) device to trigger an out-of-bounds write in the kernel, which could lead to privilege escalation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.