CVE-2022-50222
published 2025-06-18CVE-2022-50222: In the Linux kernel, the following vulnerability has been resolved: tty: vt: initialize unicode screen buffer syzbot reports kernel infoleak at vcs_read() [1]…
PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.19%
9.3th percentile
In the Linux kernel, the following vulnerability has been resolved:
tty: vt: initialize unicode screen buffer
syzbot reports kernel infoleak at vcs_read() [1], for buffer can be read
immediately after resize operation. Initialize buffer using kzalloc().
#include
#include
#include
#include
int main(int argc, char *argv[])
{
struct fb_var_screeninfo var = { };
const int fb_fd = open("/dev/fb0", 3);
ioctl(fb_fd, FBIOGET_VSCREENINFO, &var);
var.yres = 0x21;
ioctl(fb_fd, FBIOPUT_VSCREENINFO, &var);
return read(open("/dev/vcsu", O_RDONLY), &var, sizeof(var)) == -1;
}
Affected
19 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.2-1 (bookworm) | linux 6.0.2-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= d8ae7242718738ee1bf9bfdd632d2a4b150fdd26 < e02fa87e572bb7d90dcdbce9c0f519f1eb992e96 | e02fa87e572bb7d90dcdbce9c0f519f1eb992e96 |
| linux | linux | >= d8ae7242718738ee1bf9bfdd632d2a4b150fdd26 < cc9e874dace0c89ae535230c7da19b764746811e | cc9e874dace0c89ae535230c7da19b764746811e |
| linux | linux | >= d8ae7242718738ee1bf9bfdd632d2a4b150fdd26 < 5c6c65681f39bf71bc72ed589dec3b8b20e75cac | 5c6c65681f39bf71bc72ed589dec3b8b20e75cac |
| linux | linux | >= d8ae7242718738ee1bf9bfdd632d2a4b150fdd26 < 446f123aa6021e5f75a20789f05ff3f7ae51a42f | 446f123aa6021e5f75a20789f05ff3f7ae51a42f |
| linux | linux | >= d8ae7242718738ee1bf9bfdd632d2a4b150fdd26 < 777a462e1ae50a01fc4a871efa8e34d596a1e17d | 777a462e1ae50a01fc4a871efa8e34d596a1e17d |
| linux | linux | >= d8ae7242718738ee1bf9bfdd632d2a4b150fdd26 < e0ef23e9b0ad18b9fd3741b0f1ad2282e4a18def | e0ef23e9b0ad18b9fd3741b0f1ad2282e4a18def |
| linux | linux | >= d8ae7242718738ee1bf9bfdd632d2a4b150fdd26 < af77c56aa35325daa2bc2bed5c2ebf169be61b86 | af77c56aa35325daa2bc2bed5c2ebf169be61b86 |
| linux | linux_kernel | >= 0 < 5.10.140-1 | 5.10.140-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 4.19 < 4.19.256 | 4.19.256 |
| linux | linux_kernel | >= 4.20 < 5.4.211 | 5.4.211 |
| linux | linux_kernel | >= 5.11 < 5.15.61 | 5.15.61 |
| linux | linux_kernel | >= 5.16 < 5.18.18 | 5.18.18 |
| linux | linux_kernel | >= 5.19 < 5.19.2 | 5.19.2 |
| linux | linux_kernel | >= 5.5 < 5.10.137 | 5.10.137 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2022-50222: In the Linux kernel, the following vulnerability has been resolved: tty: vt: initialize unicode screen buffer syzbot reports kernel infoleak at vcs_re
osv·2025-06-18·CVSS 5.5
CVE-2022-50222 [MEDIUM] CVE-2022-50222: In the Linux kernel, the following vulnerability has been resolved: tty: vt: initialize unicode screen buffer syzbot reports kernel infoleak at vcs_re
In the Linux kernel, the following vulnerability has been resolved: tty: vt: initialize unicode screen buffer syzbot reports kernel infoleak at vcs_read() [1], for buffer can be read immediately after resize operation. Initialize buffer using kzalloc(). ---------- #include #include #include #include int main(int argc, char *argv[]) { struct fb_var_screeninfo var = { }; const int fb_fd = open("/dev/fb0", 3); ioctl(fb_fd, FBIOGET_VSCREENINFO, &var); var.yres = 0x21; ioctl(fb_fd, FBIOPUT_VSCREENINFO, &var); return read(open("/dev/vcsu", O_RDONLY), &var, sizeof(var)) == -1; } ----------
GHSA
GHSA-3c52-2wpc-wj62: In the Linux kernel, the following vulnerability has been resolved:
tty: vt: initialize unicode screen buffer
syzbot reports kernel infoleak at vcs_
ghsa_unreviewed·2025-06-18
CVE-2022-50222 [MEDIUM] GHSA-3c52-2wpc-wj62: In the Linux kernel, the following vulnerability has been resolved:
tty: vt: initialize unicode screen buffer
syzbot reports kernel infoleak at vcs_
In the Linux kernel, the following vulnerability has been resolved:
tty: vt: initialize unicode screen buffer
syzbot reports kernel infoleak at vcs_read() [1], for buffer can be read
immediately after resize operation. Initialize buffer using kzalloc().
#include
#include
#include
#include
int main(int argc, char *argv[])
{
struct fb_var_screeninfo var = { };
const int fb_fd = open("/dev/fb0", 3);
ioctl(fb_fd, FBIOGET_VSCREENINFO, &var);
var.yres = 0x21;
ioctl(fb_fd, FBIOPUT_VSCREENINFO, &var);
return read(open("/dev/vcsu", O_RDONLY), &var, sizeof(var)) == -1;
}
Red Hat
kernel: tty: vt: initialize unicode screen buffer
vendor_redhat·2025-06-18·CVSS 5.5
CVE-2022-50222 [MEDIUM] kernel: tty: vt: initialize unicode screen buffer
kernel: tty: vt: initialize unicode screen buffer
In the Linux kernel, the following vulnerability has been resolved:
tty: vt: initialize unicode screen buffer
syzbot reports kernel infoleak at vcs_read() [1], for buffer can be read
immediately after resize operation. Initialize buffer using kzalloc().
#include
#include
#include
#include
int main(int argc, char *argv[])
{
struct fb_var_screeninfo var = { };
const int fb_fd = open("/dev/fb0", 3);
ioctl(fb_fd, FBIOGET_VSCREENINFO, &var);
var.yres = 0x21;
ioctl(fb_fd, FBIOPUT_VSCREENINFO, &var);
return read(open("/dev/vcsu", O_RDONLY), &var, sizeof(var)) == -1;
}
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Fix deferr
Debian
CVE-2022-50222: linux - In the Linux kernel, the following vulnerability has been resolved: tty: vt: in...
vendor_debian·2022·CVSS 5.5
CVE-2022-50222 [MEDIUM] CVE-2022-50222: linux - In the Linux kernel, the following vulnerability has been resolved: tty: vt: in...
In the Linux kernel, the following vulnerability has been resolved: tty: vt: initialize unicode screen buffer syzbot reports kernel infoleak at vcs_read() [1], for buffer can be read immediately after resize operation. Initialize buffer using kzalloc(). ---------- #include #include #include #include int main(int argc, char *argv[]) { struct fb_var_screeninfo var = { }; const int fb_fd = open("/dev/fb0", 3); ioctl(fb_fd, FBIOGET_VSCREENINFO, &var); var.yres = 0x21; ioctl(fb_fd, FBIOPUT_VSCREENINFO, &var); return read(open("/dev/vcsu", O_RDONLY), &var, sizeof(var)) == -1; } ----------
Scope: local
bookworm: resolved (fixed in 6.0.2-1)
bullseye: resolved (fixed in 5.10.140-1)
forky: resolved (fixed in 6.0.2-1)
sid: resolved (fixed in 6.0.2-1)
trixie: resolved (fixed in 6.0.2-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/446f123aa6021e5f75a20789f05ff3f7ae51a42fhttps://git.kernel.org/stable/c/5c6c65681f39bf71bc72ed589dec3b8b20e75cachttps://git.kernel.org/stable/c/777a462e1ae50a01fc4a871efa8e34d596a1e17dhttps://git.kernel.org/stable/c/af77c56aa35325daa2bc2bed5c2ebf169be61b86https://git.kernel.org/stable/c/cc9e874dace0c89ae535230c7da19b764746811ehttps://git.kernel.org/stable/c/e02fa87e572bb7d90dcdbce9c0f519f1eb992e96https://git.kernel.org/stable/c/e0ef23e9b0ad18b9fd3741b0f1ad2282e4a18def
2025-06-18
Published