{"id":"CVE-2022-50222","title":"tty: vt: initialize unicode screen buffer","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ntty: vt: initialize unicode screen buffer\n\nsyzbot reports kernel infoleak at vcs_read() [1], for buffer can be read\nimmediately after resize operation. Initialize buffe…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= d8ae7242718738ee1bf9bfdd632d2a4b150fdd26 < e02fa87e572bb7d90dcdbce9c0f519f1eb992e96","Linux >= d8ae7242718738ee1bf9bfdd632d2a4b150fdd26 < cc9e874dace0c89ae535230c7da19b764746811e","Linux >= d8ae7242718738ee1bf9bfdd632d2a4b150fdd26 < 5c6c65681f39bf71bc72ed589dec3b8b20e75cac","Linux >= d8ae7242718738ee1bf9bfdd632d2a4b150fdd26 < 446f123aa6021e5f75a20789f05ff3f7ae51a42f","Linux >= d8ae7242718738ee1bf9bfdd632d2a4b150fdd26 < 777a462e1ae50a01fc4a871efa8e34d596a1e17d","Linux >= d8ae7242718738ee1bf9bfdd632d2a4b150fdd26 < e0ef23e9b0ad18b9fd3741b0f1ad2282e4a18def","Linux >= d8ae7242718738ee1bf9bfdd632d2a4b150fdd26 < af77c56aa35325daa2bc2bed5c2ebf169be61b86","Linux 4.19"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T20:07:09.649669Z"},"published":"2025-06-18","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:10:29.522Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2022-50222","references":[{"url":"https://git.kernel.org/stable/c/e02fa87e572bb7d90dcdbce9c0f519f1eb992e96"},{"url":"https://git.kernel.org/stable/c/cc9e874dace0c89ae535230c7da19b764746811e"},{"url":"https://git.kernel.org/stable/c/5c6c65681f39bf71bc72ed589dec3b8b20e75cac"},{"url":"https://git.kernel.org/stable/c/446f123aa6021e5f75a20789f05ff3f7ae51a42f"},{"url":"https://git.kernel.org/stable/c/777a462e1ae50a01fc4a871efa8e34d596a1e17d"},{"url":"https://git.kernel.org/stable/c/e0ef23e9b0ad18b9fd3741b0f1ad2282e4a18def"},{"url":"https://git.kernel.org/stable/c/af77c56aa35325daa2bc2bed5c2ebf169be61b86"}],"tags":["cve.org"],"epss":0.00236,"epssPercentile":0.14652,"ingestedAt":"2026-11-05T22:38:31.705Z","slug":"CVE-2022-50222","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntty: vt: initialize unicode screen buffer\n\nsyzbot reports kernel infoleak at vcs_read() [1], for buffer can be read\nimmediately after resize operation. Initialize buffer using kzalloc().\n\n  ----------\n  #include <fcntl.h>\n  #include <unistd.h>\n  #include <sys/ioctl.h>\n  #include <linux/fb.h>\n\n  int main(int argc, char *argv[])\n  {\n    struct fb_var_screeninfo var = { };\n    const int fb_fd = open(\"/dev/fb0\", 3);\n    ioctl(fb_fd, FBIOGET_VSCREENINFO, &var);\n    var.yres = 0x21;\n    ioctl(fb_fd, FBIOPUT_VSCREENINFO, &var);\n    return read(open(\"/dev/vcsu\", O_RDONLY), &var, sizeof(var)) == -1;\n  }\n  ----------\n\n## Affected\n\n- `Linux >= d8ae7242718738ee1bf9bfdd632d2a4b150fdd26 < e02fa87e572bb7d90dcdbce9c0f519f1eb992e96`\n- `Linux >= d8ae7242718738ee1bf9bfdd632d2a4b150fdd26 < cc9e874dace0c89ae535230c7da19b764746811e`\n- `Linux >= d8ae7242718738ee1bf9bfdd632d2a4b150fdd26 < 5c6c65681f39bf71bc72ed589dec3b8b20e75cac`\n- `Linux >= d8ae7242718738ee1bf9bfdd632d2a4b150fdd26 < 446f123aa6021e5f75a20789f05ff3f7ae51a42f`\n- `Linux >= d8ae7242718738ee1bf9bfdd632d2a4b150fdd26 < 777a462e1ae50a01fc4a871efa8e34d596a1e17d`\n- `Linux >= d8ae7242718738ee1bf9bfdd632d2a4b150fdd26 < e0ef23e9b0ad18b9fd3741b0f1ad2282e4a18def`\n- `Linux >= d8ae7242718738ee1bf9bfdd632d2a4b150fdd26 < af77c56aa35325daa2bc2bed5c2ebf169be61b86`\n- `Linux 4.19`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}