CVE-2023-3161
Linux Kernel ≤ 6.2
Raw vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HSummary
CVE-2023-3161 is a medium-severity Incorrect Bitwise Shift of Integer (CWE-1335) vulnerability in Linux Linux Kernel. Its CVSS base score is 5.5 (Medium).
Operationally, ranked at the 11th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-43845
Vulnerability Data
A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font->width and font->height greater than 32 to fbcon_set_font, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial…
more
of service.
- CWE(s)
Related Threats
CVEs Like This One
Affected Assets
Mitigating Controls
Control response
—
—
—
V15.2.2
Mitigating Controls (NIST CSF 2.0) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.
Secure SDLC practices directly prevent shift-related coding errors via reviews and analysis tools, but eliminating this single weakness only partially fulfills the broad control intent.
Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.
Security testing in development can detect shift-related defects before release.
Secure development life cycle includes practices that can catch or prevent undefined bitwise-shift behavior.
Application security requirements can mandate input validation and range checks that avoid invalid shift counts.
Secure system architecture and engineering principles encourage defensive coding that prevents undefined integer operations.
Secure coding directly addresses the use of safe bitwise-shift operations and bounds checking.