CVE-2023-3161

2023-06-1200:00:00

CWE-1335

redhat

www.cve.org

flaw

linux kernel

framebuffer console

denial of service

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font->width and font->height greater than 32 to fbcon_set_font, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Linux Kernel (fbcon)",
    "versions": [
      {
        "version": "Fixed in kernel 6.2-rc7",
        "status": "affected"
      }
    ]
  }
]