CVE-2026-80786EPSS p8.6%
CVE-2026-80786CVE-2026-80786
Description
In the Linux kernel, the following vulnerability has been resolved:
fbdev: Wrap user-invoked calls to fb_set_var() in helper
Handle fbcon during display updates in fb_set_var_from_user(). Check
with fbcon if the mode change is possible, update hardware state and
finally update fbcon. Update all callers.
Only the FBIOPUT_VSCREENINFO ioctl currently does all steps. Other
mode-changes callers in sysfs and driver code are missing fbcon-related
steps.
With the new helper, ps3fb and sh_mobile_lcdcfb no longer maintain
fbcon state themselves.
Scoring
| EPSS | 0.20% probability of exploitation · percentile 8.6% · 2026-10-05T12:00:23Z |
| Last modified | 2026-09-07 |