CVE-2023-3161 — Incorrect Bitwise Shift of Integer in Kernel
Severity
5.5MEDIUMNVD
OSV4.7
EPSS
0.0%
top 97.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJun 12
Latest updateFeb 14
Description
A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font->width and font->height greater than 32 to fbcon_set_font, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages4 packages
Also affects: Enterprise Linux 8.0, 9.0, Fedora 38
Patches
🔴Vulnerability Details
6OSV
▶
CVEList
▶
📋Vendor Advisories
7Microsoft▶
A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font->width and font->height greater than 32 to fbcon_set_font since there are no checks in place a shift-out-of↗2023-06-13