CVE-2024-35823: debian debian_linux Classic Buffer Overflow

Vulnerability summary

CVE-2024-35823 is a medium (CVSS 5.3) Classic Buffer Overflow vulnerability in debian debian_linux. EPSS estimates a 0.92% chance of exploitation in the next 30 days, higher than 59.4% of scored vulnerabilities.

Timeline

1. 17-05-2024
   PublishedVulnerability first disclosed.
2. 15-10-2026
   Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: vt: fix unicode buffer corruption when deleting characters This is the same issue that was fixed for the VGA text buffer in commit 39cdb68c64d8 ("vt: fix memory overlapping when deleting chars in the buffer"). The cure is also the same i.e. replace memcpy() with memmove() due to the overlaping buffers.

• CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.