A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font->width and font->height greater than 32 to fbcon_set_font, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | - | 6.2 |
| linux / linux_kernel | 6.2-rc1 | 6.2-rc1.x |
| linux / linux_kernel | 6.2-rc2 | 6.2-rc2.x |
| linux / linux_kernel | 6.2-rc3 | 6.2-rc3.x |
| linux / linux_kernel | 6.2-rc4 | 6.2-rc4.x |
| linux / linux_kernel | 6.2-rc5 | 6.2-rc5.x |
| linux / linux_kernel | 6.2-rc6 | 6.2-rc6.x |
| fedoraproject / fedora | 38 | 38.x |
| redhat / enterprise_linux | 8.0 | 8.0.x |
| redhat / enterprise_linux | 9.0 | 9.0.x |