CVE-2026-46191

A flaw was found in the Linux kernel's framebuffer console (fbcon) component. When console rotation fails, the fbcon_rotate_font() function may keep an old font buffer that is too small for the rotated font. A local user printing to the rotated console with a high character code can trigger an out-of-bounds write, leading to memory corruption. This can result in system instability or a denial of service.

This vulnerability is rated as having a Moderate impact because it requires local access and specific operations against the virtual terminal console that are uncommon in standard enterprise environments. Red Hat Enterprise Linux systems typically operate headless or rely on remote access protocols such as SSH, substantially limiting exposure to framebuffer console manipulations. While an authenticated local user could cause memory corruption and system instability under specific rotation failure conditions, the blast radius is confined to local denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.