In Linux, the fbcon_rotate_font() routine fails to reallocate a larger font buffer when console rotation is attempted. It keeps the old, smaller buffer, so printing characters with high code points can overflow the buffer that accompanies the rotated console. The vulnerability is an out‑of‑bounds buffer write in kernel space, which may corrupt adjacent kernel memory and produce a system crash. The description does not claim privilege escalation or arbitrary code execution, only a potential memory corruption outcome.

The affected component is the fbcon (framebuffer console) driver that is part of the standard Linux kernel when framebuffer support is enabled. No specific kernel version is listed, so any kernel that still contains the pre‑patch fbcon_rotate_font() implementation remains vulnerable. Administrators should verify whether their kernel includes the commit that clears the font buffer on failure and consider the system affected if it does not.

The vulnerability has a CVSS score of 7.1 and an EPSS score of less than 1 %. It is not listed in the CISA KEV catalog. The problem is local to the machine; it requires that a local process prints to the rotated console to trigger the overflow. An attacker with local access could potentially cause a denial of service by triggering the overflow, or if kernel memory corruption leads to higher impact, could exploit the flaw in a more advanced attack. The moderate CVSS and very low EPSS suggest that while the flaw is serious, exploitation is not widespread at present.