When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.
{ "urgency": "not yet assigned" }