medium5.5
CVE-2023-3161
A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel.
Impact
A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font->width and font->height greater than 32 to fbcon_set_font, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | before 6.2 Version 6.2 |
| Fedoraproject | Fedora | Version 38 |
| Redhat | Enterprise Linux | Versions 8.0, 9.0 |