CVE-2023-3161

Description

A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font->width and font->height greater than 32 to fbcon_set_font, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service.

CVSS Metrics

• v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.01%• Percentile: 2%

Techniques & Countermeasures

• CWE-1335•Incorrect Bitwise Shift of Integer

  An integer value is specified to be shifted by a negative amount or an amount greater than or equal to the number of bits contained in the value causing an unexpected or indeterminate result.

• CWE-682•Incorrect Calculation

  The product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management.

Affected Systems

• fedoraproject•fedora

  38

• linux•linux_kernel

  < 6.2 | 6.2:rc1 | 6.2:rc2 | 6.2:rc3 | 6.2:rc4 | 6.2:rc5 | 6.2:rc6

• redhat•enterprise_linux

  8.0 | 9.0

References (2)

• https://bugzilla.redhat.com/show_bug.cgi?id=2213485
• https://github.com/torvalds/linux/commit/2b09d5d364986f724f17001ccfe4126b9b43a0be