CVE-2026-89597

A flaw in the Linux kernel's uvesafb fbdev driver leaves the v86d connector callback registered when platform_driver_register() fails during initialization, because the error path returns without unregistering the callback. This results in a resource leak that, per Red Hat, may lead to system ins...

CVE-2026-89597

In the Linux kernel, the following vulnerability has been resolved: fbdev: uvesafb: unregister connector callback on init failure uvesafbinit registers the v86d connector callback before registering the platform driver. If platformdriverregister fails, the function returns the error directly and...

PT-2026-96582

In the Linux kernel, the following vulnerability has been resolved: fbdev: uvesafb: unregister connector callback on init failure uvesafb init registers the v86d connector callback before registering the platform driver. If platform driver register fails, the function returns the error directly a...

CVE-2026-89599: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: panel-dsi-cm: initialize lock before registering display dsicmprobe registers the display before initializing ddata-lock. Once omapdssregisterdisplay publishes the display, another consumer can reach a dsicm callba...

PT-2026-90314

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the fbdev component, specifically within the ssd1307fb driver, damage callbacks may execute from fbcon while printk has disabled preemption. These callbacks currently update the displ...

CVE-2026-89598: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fbdev: ssd1307fb: defer I2C transfers from damage callbacks The fbdev damage callbacks may run from fbcon while printk has disabled preemption. They currently update the display synchronously, which enters the sleeping I2C transf...

CVE-2026-89597: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fbdev: uvesafb: unregister connector callback on init failure uvesafbinit registers the v86d connector callback before registering the platform driver. If platformdriverregister fails, the function returns the error directly and...

PT-2026-96372

In the Linux kernel, the following vulnerability has been resolved: fbdev: ssd1307fb: defer I2C transfers from damage callbacks The fbdev damage callbacks may run from fbcon while printk has disabled preemption. They currently update the display synchronously, which enters the sleeping I2C transf...

The vulnerability of the store_modes() function in the drivers/video/fbdev/core/fbsysfs.c driver for kernel-based frame buffer devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the storemodes function in the drivers/video/fbdev/core/fbsysfs.c driver for kernel-based frame buffer devices in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the fb_new_modelist() function in the drivers/video/fbdev/core/fbmem.c driver for Linux kernel-based graphics buffer devices allows a hacker to cause a system failure.

The vulnerability of the fbnewmodelist function in the drivers/video/fbdev/core/fbmem.c driver for kernel-based frame buffer devices in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

K000163224: Linux kernel vulnerabilities CVE-2026-53401, CVE-2026-53402

Security Advisory Description CVE-2026-53401 In the Linux kernel, the following vulnerability has been resolved: fbdev: omap2: fix use-after-free in omapfbmmap omapfbmmap has a race condition with OMAPFBSETUPPLANE ioctl that can lead to use-after-free: The fbmmap entry point holds mmlock but not...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073372)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073372 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: fix use-after-free in storemodes storemodes replaces a framebuffer's modelist with modes...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073371)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073371 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fbnewmodelist to prevent null-ptr-deref in fbvideomodetovar info-var, a framebuffer's...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053202)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053202 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: core: fbcvt: avoid division by 0 in fbcvthperiod In fbfindmodecvt, iff mode-refresh someho...

SUSE CVE-2026-80785

In the Linux kernel, the following vulnerability has been resolved: fbdev: serialize mode sysfs access with lockfbinfo showmode, showmodes, and storemode access fbinfo-modelist and fbinfo-mode without holding lockfbinfo. storemodes takes lockfbinfo while replacing the modelist and freeing the old...

SUSE CVE-2026-80786

In the Linux kernel, the following vulnerability has been resolved: fbdev: Wrap user-invoked calls to fbsetvar in helper Handle fbcon during display updates in fbsetvarfromuser. Check with fbcon if the mode change is possible, update hardware state and finally update fbcon. Update all callers. On...

AZL-99558 CVE-2026-80786 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: fbdev: Wrap user-invoked calls to fbsetvar in helper Handle fbcon during display updates in fbsetvarfromuser. Check with fbcon if the mode change is possible, update hardware state and finally update fbcon. Update all callers. On...

CVE-2026-80786

In the Linux kernel, the following vulnerability has been resolved: fbdev: Wrap user-invoked calls to fbsetvar in helper Handle fbcon during display updates in fbsetvarfromuser. Check with fbcon if the mode change is possible, update hardware state and finally update fbcon. Update all callers. On...

CVE-2026-80785

In the Linux kernel, the following vulnerability has been resolved: fbdev: serialize mode sysfs access with lockfbinfo showmode, showmodes, and storemode access fbinfo-modelist and fbinfo-mode without holding lockfbinfo. storemodes takes lockfbinfo while replacing the modelist and freeing the old...

AZL-99434 CVE-2026-80785 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: fbdev: serialize mode sysfs access with lockfbinfo showmode, showmodes, and storemode access fbinfo-modelist and fbinfo-mode without holding lockfbinfo. storemodes takes lockfbinfo while replacing the modelist and freeing the old...