CVE-2023-3161
A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font->width and font->height greater than 32 to fbcon_set_font...
Original description
The description as published by the source.
A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font->width and font->height greater than 32 to fbcon_set_font, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-3161 linux Fixed in: 5.10.178-1
- Ubuntu UBUNTU-CVE-2023-3161 linux-aws Fixed in: 4.4.0-1121.127
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- report bugzilla.redhat.com