{"id":"CVE-2024-35823","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nvt: fix unicode buffer corruption when deleting characters\n\nThis is the same issue that was fixed for the VGA text buffer in commit\n39cdb68c64d8 (\"vt: fix memory overla…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nvt: fix unicode buffer corruption when deleting characters\n\nThis is the same issue that was fixed for the VGA text buffer in commit\n39cdb68c64d8 (\"vt: fix memory overla…","severity":"medium","cvss":5.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-120"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 3.7, < 4.19.312","linux_kernel >= 4.20, < 5.4.274","linux_kernel >= 5.5, < 5.10.215","linux_kernel >= 5.11, < 5.15.154","linux_kernel >= 5.16, < 6.1.84","linux_kernel >= 6.2, < 6.6.24","linux_kernel >= 6.7, < 6.7.12","linux_kernel = 6.8","debian_linux = 10.0"],"patched":["linux_kernel 6.7.12"],"published":"2024-05-17","updated":"2026-10-15","sourceUpdated":"2026-10-15T01:17:48.090","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-35823","references":[{"url":"https://git.kernel.org/stable/c/0190d19d7651c08abc187dac3819c61b726e7e3f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/1581dafaf0d34bc9c428a794a22110d7046d186d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/1ce408f75ccf1e25b3fddef75cca878b55f2ac90","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/2933b1e4757a0a5c689cf48d80b1a2a85f237ff1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/7529cbd8b5f6697b369803fe1533612c039cabda","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/994a1e583c0c206c8ca7d03334a65b79f4d8bc51","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/fc7dfe3d123f00e720be80b920da287810a1f37d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/ff7342090c1e8c5a37015c89822a68b275b46f8a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/0190d19d7651c08abc187dac3819c61b726e7e3f","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/1581dafaf0d34bc9c428a794a22110d7046d186d","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/1ce408f75ccf1e25b3fddef75cca878b55f2ac90","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/2933b1e4757a0a5c689cf48d80b1a2a85f237ff1","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/7529cbd8b5f6697b369803fe1533612c039cabda","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/994a1e583c0c206c8ca7d03334a65b79f4d8bc51","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/fc7dfe3d123f00e720be80b920da287810a1f37d","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/ff7342090c1e8c5a37015c89822a68b275b46f8a","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd","cve.org"],"epss":0.00915,"epssPercentile":0.59943,"ingestedAt":"2026-10-15T03:30:12.681Z","ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2024-05-17T15:14:05.276566Z"},"slug":"CVE-2024-35823","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nvt: fix unicode buffer corruption when deleting characters\n\nThis is the same issue that was fixed for the VGA text buffer in commit\n39cdb68c64d8 (\"vt: fix memory overlapping when deleting chars in the\nbuffer\"). The cure is also the same i.e. replace memcpy() with memmove()\ndue to the overlaping buffers.\n\n## Affected\n\n- `linux_kernel >= 3.7, < 4.19.312`\n- `linux_kernel >= 4.20, < 5.4.274`\n- `linux_kernel >= 5.5, < 5.10.215`\n- `linux_kernel >= 5.11, < 5.15.154`\n- `linux_kernel >= 5.16, < 6.1.84`\n- `linux_kernel >= 6.2, < 6.6.24`\n- `linux_kernel >= 6.7, < 6.7.12`\n- `linux_kernel = 6.8`\n- `debian_linux = 10.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.7.12`","depth":"sunlit","depthScore":29,"depthScoreParts":{"impact":29.2,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}