CVE-2023-54198

CVE-2023-54198 affects the Linux kernel tty subsystem: tty_driver_lookup_tty() can return a tty object for an invalid index when an invalid console= is given (e.g., console=tty3270), leading to a NULL-pointer dereference in tty_open. The issue was fixed in the kernel (tty: fix out-of-bounds acces...

CVE-2023-54198: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in ttydriverlookuptty When specifying an invalid console= device like console=tty3270, ttydriverlookuptty returns the tty struct without checking whether index is a valid number. To reproduce:...

PT-2025-54027

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the tty driver lookup tty function that can lead to an out-of-bounds access. This occurs when an invalid console device is specified, such as...