CVE-2026-31742

A flaw was found in the Linux kernel. When a console is resized while in an alternate screen mode, the system may fail to properly update its internal buffer for unicode characters. This can lead to an out-of-bounds memory access when the alternate screen mode is exited, potentially causing a...

kernel: invalid read location in vgacon_invert_region function in drivers/video/console/vgacon.c

A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console. An out-of-bounds read can occur, leaking information to the console...

A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console calling an ioctl VT_RESIZE which causes an out-of-bounds write to occur. This flaw allows a local user with access to the VGA console to crash the system potentially escalating their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2020-5848)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5848 advisory. - nfsd: apply umask on fs without ACL support J. Bruce Fields Orabug: 31779884 CVE-2020-24394 - bcache: fix potential deadlock problem in...