kernel: Linux kernel: Out-of-bounds write in fbdev can lead to privilege escalation, information disclosure, or denial of service.

A flaw was found in the Linux kernel, specifically within the framebuffer device fbdev subsystem. This vulnerability, an out-of-bounds write, occurs because the bitputcs function does not properly check boundaries when displaying text near the edges of the screen. A local user with low privileges...

kernel: Linux kernel: Out-of-bounds write in fbdev can lead to privilege escalation, information disclosure, or denial of service.

A flaw was found in the Linux kernel, specifically within the framebuffer device fbdev subsystem. This vulnerability, an out-of-bounds write, occurs because the bitputcs function does not properly check boundaries when displaying text near the edges of the screen. A local user with low privileges...

RHEL 9 : kernel-rt (RHSA-2026:2577)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2577 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

RHEL 8 : kernel (RHSA-2026:2535)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2535 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: RDMA/core: Fix KASAN:...

RHEL 9 : kernel (RHSA-2026:2573)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2573 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: ath9khtc...

Oracle Linux 10 : kernel (ELSA-2026-2282)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-2282 advisory. - mptcp: Use skdstget and dstdevrcu in mptcpactiveenable. Davide Caratti RHEL-129044 CVE-2025-40133 - vsock/vmci: Clear the vmci transport packet...

ALSA-2026:2282 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Memory corruption in Squashfs due to incorrect block size calculation CVE-2025-38415 kernel: vsock/vmci: Clear the vmci transport packet properly when initializing it...

RHEL 10 : kernel (RHSA-2026:2282)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2282 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Memory corrupti...

RHEL 10 : kernel (RHSA-2026:1727)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1727 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ntbhwswitchtec: Fix...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38312)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38312 advisory. - In the Linux kernel, the following vulnerability has been resolved: fbdev: core: fbcvt: avoid division by 0 ...

Azure Linux 3.0 Security Update: kernel (CVE-2024-41094)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41094 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/fbdev-dma: Only set smemstart is...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38215)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38215 advisory. - In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix doregisterframebuffer to...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38214)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38214 advisory. - In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fbsetvar to prevent null-...

PT-2026-37604

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A refcount leak exists in the of get display timings function within the fbdev component. The of parse phandle function returns a device node with an incremented reference count, which i...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001283)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001283 advisory. In the function sbusfbioctlhelper in drivers/video/fbdev/sbuslib.c in the Linux kernel through 4.15, an integer signedness error allows arbitrary information leakage...

EulerOS 2.0 SP10 : kernel (EulerOS-SA-2026-1029)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : scsi: ses: Fix slab-out-of-bounds in sesintfremoveCVE-2023-53521 binfmtmisc: fix shift-out-of-bounds in checkspecialflagsCVE-2022-50497 scsi: lpfc...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993185)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993185 advisory. In the Linux kernel, the following vulnerability has been resolved: video: fbdev: s3fb: Check the size of screen before memsetio In the function s3fbsetpar, the valu...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993230)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993230 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: display: Fix refcount leak bug In omapdssinitfbdev, offindnodebyname will return a...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992896)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992896 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: fbpm2fb: Avoid potential divide by zero error In dofbioctl of fbmem.c, if cmd is...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992898)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992898 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: sisfb: Fix strbuf array overflow The values of the variables xres and yres are placed in...