CVE-2024-35823: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-35823 is a vulnerability discovered in the Linux kernel's virtual terminal (VT) subsystem that affects the unicode buffer handling when deleting characters. The issue was identified on May 17, 2024, and affects various Linux kernel versions. The vulnerability is similar to a previously fixed issue in the VGA text buffer that was addressed in commit 39cdb68c64d8 (Kernel Git).

The vulnerability stems from improper memory handling in the virtual terminal subsystem when deleting characters. Specifically, the issue occurs due to overlapping memory buffers when using memcpy() instead of memmove() in the vc_uniscr_delete function. The CVSS v3.1 base score is 5.3 (Medium), with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L (NVD).

The vulnerability can lead to unicode buffer corruption in the virtual terminal when deleting characters, potentially causing display artifacts or terminal malfunction. This could affect the stability and functionality of the terminal interface (Kernel Git).

The vulnerability requires local access to the system and interaction with the virtual terminal. No known exploits in the wild have been reported at the time of assessment (NVD).

The issue has been fixed by replacing memcpy() with memmove() in the affected code. Multiple Linux distributions have released patches, including Ubuntu with fixes for versions 22.04 LTS (5.15.0-116.126) and 20.04 LTS (5.4.0-189.209), and Debian with updates for various kernel versions (Ubuntu Security).