7.8
CVE-2025-39967
- EPSS 0.16%
- Veröffentlicht 15.10.2025 07:55:51
- Zuletzt bearbeitet 30.07.2026 06:24:02
- Erkennungen
fbcon: fix integer overflow in fbcon_do_set_font
In the Linux kernel, the following vulnerability has been resolved: fbcon: fix integer overflow in fbcon_do_set_font Fix integer overflow vulnerabilities in fbcon_do_set_font() where font size calculations could overflow when handling user-controlled font parameters. The vulnerabilities occur when: 1. CALC_FONTSZ(h, pitch, charcount) performs h * pith * charcount multiplication with user-controlled values that can overflow. 2. FONT_EXTRA_WORDS * sizeof(int) + size addition can also overflow 3. This results in smaller allocations than expected, leading to buffer overflows during font data copying. Add explicit overflow checking using check_mul_overflow() and check_add_overflow() kernel helpers to safety validate all size calculations before allocation.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.4.235 < 4.5
Linux ≫ Linux Kernel Version >= 4.9.235 < 4.10
Linux ≫ Linux Kernel Version >= 4.14.196 < 4.15
Linux ≫ Linux Kernel Version >= 4.19.143 < 4.20
Linux ≫ Linux Kernel Version >= 5.4.62 < 5.4.300
Linux ≫ Linux Kernel Version >= 5.8.6 < 5.9
Linux ≫ Linux Kernel Version >= 5.9.1 < 5.10.245
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.194
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.155
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.109
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.50
Linux ≫ Linux Kernel Version >= 6.13 < 6.16.10
Linux ≫ Linux Kernel Version 5.9 Update -
Linux ≫ Linux Kernel Version 5.9 Update rc3
Linux ≫ Linux Kernel Version 5.9 Update rc4
Linux ≫ Linux Kernel Version 5.9 Update rc5
Linux ≫ Linux Kernel Version 5.9 Update rc6
Linux ≫ Linux Kernel Version 5.9 Update rc7
Linux ≫ Linux Kernel Version 5.9 Update rc8
Linux ≫ Linux Kernel Version 6.17 Update rc1
Linux ≫ Linux Kernel Version 6.17 Update rc2
Linux ≫ Linux Kernel Version 6.17 Update rc3
Linux ≫ Linux Kernel Version 6.17 Update rc4
Linux ≫ Linux Kernel Version 6.17 Update rc5
Linux ≫ Linux Kernel Version 6.17 Update rc6
Linux ≫ Linux Kernel Version 6.17 Update rc7
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.16% | 0.055 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
CWE-190 Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
https://git.kernel.org/stable/c/994bdc2d23c79087fbf7dcd9544454e8ebcef877
https://git.kernel.org/stable/c/9c8ec14075c5317edd6b242f1be8167aa1e4e333
https://git.kernel.org/stable/c/b8a6e85328aeb9881531dbe89bcd2637a06c3c95
https://git.kernel.org/stable/c/a6eb9f423b3db000aaedf83367b8539f6b72dcfc
https://git.kernel.org/stable/c/adac90bb1aaf45ca66f9db8ac100be16750ace78
https://git.kernel.org/stable/c/4a4bac869560f943edbe3c2b032062f6673b13d3
https://git.kernel.org/stable/c/c0c01f9aa08c8e10e10e8c9ebb5be01a4eff6eb7
https://git.kernel.org/stable/c/1a194e6c8e1ee745e914b0b7f50fa86c89ed13fe