CVE-2020-14331

Name	CVE-2020-14331
Description	A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, calling an ioctl VT_RESIZE, which causes an out-of-bounds write to occur. This flaw allows a local user with access to the VGA console to crash the system, potentially escalating their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-2385-1, DLA-2420-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
linux (PTS)	bullseye	5.10.223-1	fixed
	bullseye (security)	5.10.226-1	fixed
	bookworm	6.1.115-1	fixed
	bookworm (security)	6.1.112-1	fixed
	trixie	6.11.7-1	fixed
	sid	6.11.9-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin
linux	source	stretch	4.9.240-1		DLA-2420-1
linux	source	buster	4.19.146-1
linux	source	(unstable)	5.7.17-1	unimportant
linux-4.19	source	stretch	4.19.146-1~deb9u1		DLA-2385-1

https://www.openwall.com/lists/oss-security/2020/07/28/2
Only exploitable when CONFIG_VGACON_SOFT_SCROLLBACK is set