High 7.8Published Jun 18, 2025

CVE-2022-49948vt: Clear selection before changing the font

Updated under an hour ago (Oct 26, 2026, 4:40 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: vt: Clear selection before changing the font When changing the console font with ioctl(KDFONTOP) the new font size can be bigger than the previous font. A previous selection may thus now be outside of the new screen size and thus trigger out-of-bounds accesses to graphics memory if the selection is removed in vc_do_resize(). Prevent such out-of-memory accesses by dropping the selection before the various con_font_set() console handlers are called.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 15, 2026
First seen by InfoSec Signals: Oct 15, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 009e39ae44f4191188aeb6dfbf661b771dbbe515 before c555cf04684fde39b5b0dd9fd80730030ee10c4a; from 009e39ae44f4191188aeb6dfbf661b771dbbe515 before e9ba4611ddf676194385506222cce7b0844e708e; from 009e39ae44f4191188aeb6dfbf661b771dbbe515 before f74b4a41c5d7c9522469917e3072e55d435efd9e; 009e39ae44f4191188aeb6dfbf661b771dbbe515 builds before 1cf1930369c9dc428d827b60260c53271bff3285; from 009e39ae44f4191188aeb6dfbf661b771dbbe515 before 989201bb8c00b222235aff04e6200230d29dc7bb; from 009e39ae44f4191188aeb6dfbf661b771dbbe515 before 2535431ae967ad17585513649625fea7db28d4db; from 009e39ae44f4191188aeb6dfbf661b771dbbe515 before c904fe03c4bd1f356a58797d39e2a5d0ca15cefc; from 009e39ae44f4191188aeb6dfbf661b771dbbe515 before 566f9c9f89337792070b5a6062dff448b3e7977f; and 16 more ranges	CNA record
linux linux_kernel linux:linux_kernel	before 4.9.328; from 4.10 before 4.14.293; from 4.15 before 4.19.258; from 4.20 before 5.4.213; from 5.5 before 5.10.142; from 5.11 before 5.15.66; from 5.16 before 5.19.8; 6.0; and 2 more ranges	NVD

References

References

https://git.kernel.org/stable/c/c555cf04684fde39b5b0dd9fd80730030ee10c4a	patch
https://git.kernel.org/stable/c/e9ba4611ddf676194385506222cce7b0844e708e	patch
https://git.kernel.org/stable/c/f74b4a41c5d7c9522469917e3072e55d435efd9e	patch
https://git.kernel.org/stable/c/1cf1930369c9dc428d827b60260c53271bff3285	patch
https://git.kernel.org/stable/c/989201bb8c00b222235aff04e6200230d29dc7bb	patch
https://git.kernel.org/stable/c/2535431ae967ad17585513649625fea7db28d4db	patch
https://git.kernel.org/stable/c/c904fe03c4bd1f356a58797d39e2a5d0ca15cefc	patch
https://git.kernel.org/stable/c/566f9c9f89337792070b5a6062dff448b3e7977f	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.