Linux Kernel Vulnerability in Unicode Screen Buffer Initialization

CVE-2022-50222

What is CVE-2022-50222?

A vulnerability has been identified in the Linux kernel that allows an infoleak in the virtual console system. When the unicode screen buffer is resized, sensitive buffer data can be read immediately after the operation. This occurs due to improper initialization of the buffer, leading to uninitialized memory disclosure. Developers are encouraged to update their kernel versions to include the fix that initializes the buffer properly using kzalloc(), mitigating the risk of exposing sensitive information.

References