CVE-2023-54198

kernel: tty: fix out-of-bounds access in tty_driver_lookup_tty()

Loading…

Severity

Low

Red Hat Product Security

3.3

CVSS 3.1

Review impact separately from score.

Published · December 30, 2025

Updated · August 5, 2026

Description

An out-of-bounds access was found in the TTY subsystem. When an invalid console device is specified on the kernel command line (e.g., console=tty3270), the driver lookup returns a TTY struct with an invalid index, causing a crash during boot.

Statement

This requires specifying an invalid console= parameter on the kernel command line. Only users with physical access or boot configuration access can trigger this. Normal system operation without such parameters is unaffected.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 3.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE-1285 · Improper Validation of Specified Index, Position, or Offset in Input