CVE-2026-74635

A flaw was found in the Linux kernel's fbdev subsystem, specifically within the bitcursor function. A local user can exploit this vulnerability by writing arbitrary values to the /dev/vcsa device or by manipulating font changes. This improper handling of glyph indices can lead to an out-of-bounds...

Linux Distros Unpatched Vulnerability : CVE-2026-72271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: i740fb: fix potential memory leak in i740fbprobe In i740fbprobe, the memory allocated in fbvideomodetomodelist for modelist is not freed in the error...

CVE-2026-72268

The CVE-2026-72268 entry concerns the Linux kernel fbdev driver tdfxfb. In tdfxfb_probe, memory is allocated for a modelist via fb_videomode_to_modelist() when CONFIG_FB_3DFX_I2C is defined, but this memory is not freed along error paths. The fix is to call fb_destroy_modelist() to release the al...

EUVD-2022-55182

Malicious code in bioql PyPI...

PT-2025-38421

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified in the fbcon do set font function within the fbdev subsystem of the Linux kernel. The issue occurs when a buffer is newly allocated by fbcon set font and is...

PT-2025-35958

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the fbdev subsystem related to an out-of-bounds write in the fast imageblit function. This issue occurs when a user-space program performs an ioctl...

CVE-2025-37851

In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: Add 'plane' value check Function dispcovlsetup is not intended to work with the value OMAPDSSWB of the enum parameter plane. The value of this parameter is initialized in dssinitoverlays and in the current state of...

PT-2025-27989

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.10.226 Description: A null pointer dereference issue was found in the Linux kernel's fbdev subsystem. The issue occurs when fb add videomode fails to allocate memory for fb videomode, leading to a null pointer...

PT-2025-27990

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.10.226 Description: A null pointer dereference issue was found in the Linux kernel's fbdev subsystem. The issue occurs when fb add videomode fails to allocate memory for fb videomode, leading to a null pointer...

PT-2023-34824 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.90 Description: A potential security issue has been identified in the Linux Kernel, specifically in the omapfb module of the fbdev subsystem. The issue is related to a stack overflow warning. The actual...

PT-2023-34762 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: A potential security issue has been identified in the Linux Kernel, specifically in the omapfb module of the fbdev subsystem. The issue is related to a stack overflow warning. The actual impa...