CVE-2020-28097

Medium

Description

The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. There is a vgacon_scrolldelta out-of-bounds read, aka CID-973c096f6a85.

SeverityMedium
CVSS5.9
Exploit probability—
ProductLinux Kernel
PublishedJun 24, 2021
First seenJun 24, 2021

How to fix

Update
  • linux linux_kernel5.8.10 or later

Affected products

ProductAffected versionsFixed in
linux linux_kernelv < 5.8.105.8.10
netapp cloud_backupNo range specified—
netapp h410c_firmwareNo range specified—
netapp h300s_firmwareNo range specified—
netapp h500s_firmwareNo range specified—
netapp h700s_firmwareNo range specified—
netapp h300e_firmwareNo range specified—
netapp h500e_firmwareNo range specified—
netapp h700e_firmwareNo range specified—
netapp h410s_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.