USN-5591-3

Advisory lineage Upstream: 2 Downstream: 0
Published: 01 Sept 2022, 17:51
Last modified:03 Jun 2026, 13:34

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

01 Sept 2022, 17:51
Published
Vulnerability first disclosed
03 Jun 2026, 13:34
Last Modified
Vulnerability information updated

Description

linux, linux-azure-4.15, linux-dell300x, linux-gcp-4.15, linux-kvm, linux-snapdragon vulnerability It was discovered that the virtual terminal driver in the Linux kernel did not properly handle VGA console font changes, leading to an out-of-bounds write. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.

Affected Systems

  • ubuntu•linux

    < 4.15.0-192.203

  • ubuntu•linux-azure-4.15

    < 4.15.0-1150.165

  • ubuntu•linux-dell300x

    < 4.15.0-1052.57

  • ubuntu•linux-gcp-4.15

    < 4.15.0-1135.151

  • ubuntu•linux-kvm

    < 4.15.0-1126.131

  • ubuntu•linux-snapdragon

    < 4.15.0-1136.146

References (2)