SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-80786

UNKNOWN · CVSS N/A EPSS 0.15%

Source: NVD + CISA KEV + EPSS · Published 2026-09-04 · Last synced 2026-09-19

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's framebuffer device (fbdev) subsystem, specifically in the handling of user-invoked calls to the fb_set_var() function. This oversight could lead to improper mode changes during display updates, potentially resulting in inconsistent hardware states and display issues. Linux system administrators and developers working with framebuffer devices should prioritize addressing this issue to ensure stable and reliable display functionality.

CVE
CVE-2026-80786
Severity
UNKNOWN
CVSS
N/A
EPSS
0.15%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: fbdev: Wrap user-invoked calls to fb_set_var() in helper Handle fbcon during display updates in fb_set_var_from_user(). Check with fbcon if the mode change is possible, update hardware state and finally update fbcon. Update all callers. Only the FBIOPUT_VSCREENINFO ioctl currently does all steps. Other mode-changes callers in sysfs and driver code are missing fbcon-related steps. With the new helper, ps3fb and sh_mobile_lcdcfb no longer maintain fbcon state themselves.