{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2022-50222",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2022-50222",
    "idYear": 2022,
    "status": "PUBLISHED",
    "publishedAt": "2025-06-18T11:03:56.744Z",
    "updatedAt": "2026-05-11T19:15:10.357Z",
    "importedAt": "2026-10-24T01:56:49.724Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "tty: vt: initialize unicode screen buffer",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ntty: vt: initialize unicode screen buffer\n\nsyzbot reports kernel infoleak at vcs_read() [1], for buffer can be read\nimmediately after resize operation. Initialize buffer using kzalloc().\n\n  ----------\n  #include <fcntl.h>\n  #include <unistd.h>\n  #include <sys/ioctl.h>\n  #include <linux/fb.h>\n\n  int main(int argc, char *argv[])\n  {\n    struct fb_var_screeninfo var = { };\n    const int fb_fd = open(\"/dev/fb0\", 3);\n    ioctl(fb_fd, FBIOGET_VSCREENINFO, &var);\n    var.yres = 0x21;\n    ioctl(fb_fd, FBIOPUT_VSCREENINFO, &var);\n    return read(open(\"/dev/vcsu\", O_RDONLY), &var, sizeof(var)) == -1;\n  }\n  ----------",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "d8ae7242718738ee1bf9bfdd632d2a4b150fdd26",
              "status": "affected",
              "versionType": "git",
              "lessThan": "e02fa87e572bb7d90dcdbce9c0f519f1eb992e96"
            },
            {
              "version": "d8ae7242718738ee1bf9bfdd632d2a4b150fdd26",
              "status": "affected",
              "versionType": "git",
              "lessThan": "cc9e874dace0c89ae535230c7da19b764746811e"
            },
            {
              "version": "d8ae7242718738ee1bf9bfdd632d2a4b150fdd26",
              "status": "affected",
              "versionType": "git",
              "lessThan": "5c6c65681f39bf71bc72ed589dec3b8b20e75cac"
            },
            {
              "version": "d8ae7242718738ee1bf9bfdd632d2a4b150fdd26",
              "status": "affected",
              "versionType": "git",
              "lessThan": "446f123aa6021e5f75a20789f05ff3f7ae51a42f"
            },
            {
              "version": "d8ae7242718738ee1bf9bfdd632d2a4b150fdd26",
              "status": "affected",
              "versionType": "git",
              "lessThan": "777a462e1ae50a01fc4a871efa8e34d596a1e17d"
            },
            {
              "version": "d8ae7242718738ee1bf9bfdd632d2a4b150fdd26",
              "status": "affected",
              "versionType": "git",
              "lessThan": "e0ef23e9b0ad18b9fd3741b0f1ad2282e4a18def"
            },
            {
              "version": "d8ae7242718738ee1bf9bfdd632d2a4b150fdd26",
              "status": "affected",
              "versionType": "git",
              "lessThan": "af77c56aa35325daa2bc2bed5c2ebf169be61b86"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "4.19",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "4.19"
            },
            {
              "version": "4.19.256",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "4.19.*"
            },
            {
              "version": "5.4.211",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.4.*"
            },
            {
              "version": "5.10.137",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "version": "5.15.61",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "5.18.18",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.18.*"
            },
            {
              "version": "5.19.2",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.19.*"
            },
            {
              "version": "6.0",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}