Missing Initialization of Resource Affecting kernel-kdump-devel package, versions *
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-RHEL7-KERNELKDUMPDEVEL-8319009
- published 31 Oct 2024
- disclosed 29 Oct 2024
Introduced: 29 Oct 2024
CVE-2024-50076 Open this link in a new tabHow to fix?
There is no fixed version for RHEL:7 kernel-kdump-devel.
NVD Description
Note: Versions mentioned in the description apply only to the upstream kernel-kdump-devel package and not the kernel-kdump-devel package as distributed by RHEL.
See How to fix? for RHEL:7 relevant fixed versions and status.
In the Linux kernel, the following vulnerability has been resolved:
vt: prevent kernel-infoleak in con_font_get()
font.data may not initialize all memory spaces depending on the implementation of vc->vc_sw->con_font_get. This may cause info-leak, so to prevent this, it is safest to modify it to initialize the allocated memory space to 0, and it generally does not affect the overall performance of the system.
References
- https://access.redhat.com/security/cve/CVE-2024-50076
- https://git.kernel.org/stable/c/adb1f312f38f0d2c928ceaff089262798cc260b4
- https://git.kernel.org/stable/c/dc2d5f02636c7587bdd6d1f60fc59c55860b00a4
- https://git.kernel.org/stable/c/f956052e00de211b5c9ebaa1958366c23f82ee9e
- https://git.kernel.org/stable/c/1e5a17dc77d8a8bbe67040b32e2ef755901aba44
- https://git.kernel.org/stable/c/23c4cb8a56978e5b1baa171d42e616e316c2039d
- https://git.kernel.org/stable/c/b3959d5eca136e0588f9af3867b34032160cb826
- https://git.kernel.org/stable/c/dc794e878e6d79f75205be456b1042a289c5759d
- https://git.kernel.org/stable/c/efc67cee700b89ffbdb74a0603a083ec1290ae31