{"id":"CVE-2022-50222","summary":"tty: vt: initialize unicode screen buffer","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ntty: vt: initialize unicode screen buffer\n\nsyzbot reports kernel infoleak at vcs_read() [1], for buffer can be read\nimmediately after resize operation. Initialize buffer using kzalloc().\n\n  ----------\n  #include \u003cfcntl.h\u003e\n  #include \u003cunistd.h\u003e\n  #include \u003csys/ioctl.h\u003e\n  #include \u003clinux/fb.h\u003e\n\n  int main(int argc, char *argv[])\n  {\n    struct fb_var_screeninfo var = { };\n    const int fb_fd = open(\"/dev/fb0\", 3);\n    ioctl(fb_fd, FBIOGET_VSCREENINFO, &var);\n    var.yres = 0x21;\n    ioctl(fb_fd, FBIOPUT_VSCREENINFO, &var);\n    return read(open(\"/dev/vcsu\", O_RDONLY), &var, sizeof(var)) == -1;\n  }\n  ----------","modified":"2026-04-03T13:14:42.971838347Z","published":"2025-06-18T11:03:56.744Z","related":["SUSE-SU-2025:02264-1","SUSE-SU-2025:02308-1","SUSE-SU-2025:02320-1","SUSE-SU-2025:02321-1","SUSE-SU-2025:02322-1","SUSE-SU-2025:02537-1"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50222.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/446f123aa6021e5f75a20789f05ff3f7ae51a42f"},{"type":"WEB","url":"https://git.kernel.org/stable/c/5c6c65681f39bf71bc72ed589dec3b8b20e75cac"},{"type":"WEB","url":"https://git.kernel.org/stable/c/777a462e1ae50a01fc4a871efa8e34d596a1e17d"},{"type":"WEB","url":"https://git.kernel.org/stable/c/af77c56aa35325daa2bc2bed5c2ebf169be61b86"},{"type":"WEB","url":"https://git.kernel.org/stable/c/cc9e874dace0c89ae535230c7da19b764746811e"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e02fa87e572bb7d90dcdbce9c0f519f1eb992e96"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e0ef23e9b0ad18b9fd3741b0f1ad2282e4a18def"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50222.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50222"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"d8ae7242718738ee1bf9bfdd632d2a4b150fdd26"},{"fixed":"e02fa87e572bb7d90dcdbce9c0f519f1eb992e96"},{"fixed":"cc9e874dace0c89ae535230c7da19b764746811e"},{"fixed":"5c6c65681f39bf71bc72ed589dec3b8b20e75cac"},{"fixed":"446f123aa6021e5f75a20789f05ff3f7ae51a42f"},{"fixed":"777a462e1ae50a01fc4a871efa8e34d596a1e17d"},{"fixed":"e0ef23e9b0ad18b9fd3741b0f1ad2282e4a18def"},{"fixed":"af77c56aa35325daa2bc2bed5c2ebf169be61b86"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50222.json"}}],"schema_version":"1.7.5"}