01 Record

CVE-2024-50076

vt: prevent kernel-infoleak in con_font_get()

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

vt: prevent kernel-infoleak in con_font_get()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.60% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 48.7% of scored records. A rank, not a probability.
NVD base score: 6.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-10-29 00:50Z2 YR AGO

Last updated

2026-05-11 20:44Z5 MO AGO

Reserved

2024-10-21

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-909Missing Initialization of ResourceClass

Data version

5.2

Document digest

3519e5dc0fcdd6fcf7bd08a0c2cfd96f13de3478f7f794e2de2f2bd5db9db25e

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < efc67cee700b89ffbdb74a0603a083ec1290ae31, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < dc794e878e6d79f75205be456b1042a289c5759d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 1e5a17dc77d8a8bbe67040b32e2ef755901aba44, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < b3959d5eca136e0588f9af3867b34032160cb826, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 23c4cb8a56978e5b1baa171d42e616e316c2039d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < dc2d5f02636c7587bdd6d1f60fc59c55860b00a4, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < adb1f312f38f0d2c928ceaff089262798cc260b4, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < f956052e00de211b5c9ebaa1958366c23f82ee9e, 2.6.12—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/efc67cee700b89ffbdb74a0603a083ec1290ae31
git.kernel.orghttps://git.kernel.org/stable/c/dc794e878e6d79f75205be456b1042a289c5759d
git.kernel.orghttps://git.kernel.org/stable/c/1e5a17dc77d8a8bbe67040b32e2ef755901aba44
git.kernel.orghttps://git.kernel.org/stable/c/b3959d5eca136e0588f9af3867b34032160cb826
git.kernel.orghttps://git.kernel.org/stable/c/23c4cb8a56978e5b1baa171d42e616e316c2039d
git.kernel.orghttps://git.kernel.org/stable/c/dc2d5f02636c7587bdd6d1f60fc59c55860b00a4
git.kernel.orghttps://git.kernel.org/stable/c/adb1f312f38f0d2c928ceaff089262798cc260b4
git.kernel.orghttps://git.kernel.org/stable/c/f956052e00de211b5c9ebaa1958366c23f82ee9e

07 Fixed in

Debian 12

linux
Fixed in 6.1.119-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.11.5-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.11.5-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.