printer-cracktro

printer cracktro My Pwn2Own entries for Pwn2Own Toronto 2022 targeted two different printers. One is Linux based Lexmark and other is DryOS based CANON. After pwning the software on the printer the entries would display a little oldschool crack-intro animation thing to celebrate/illustrate the...

The vulnerability of the fbcon_do_set_font() function in the drivers/video/fbdev/core/fbcon.c driver for kernel-based graphics buffer devices in the Linux operating system allows a hacker to gain access to protected information or cause service failures.

The vulnerability of the fbcondosetfont function in the drivers/video/fbdev/core/fbcon.c driver for kernel-based graphics buffer devices in the Linux operating system is related to the execution of operations outside of the buffer’s boundaries. Exploiting this vulnerability could allow an attacke...

CVE-2026-80786 fbdev: Wrap user-invoked calls to fb_set_var() in helper

In the Linux kernel, the following vulnerability has been resolved: fbdev: Wrap user-invoked calls to fbsetvar in helper Handle fbcon during display updates in fbsetvarfromuser. Check with fbcon if the mode change is possible, update hardware state and finally update fbcon. Update all callers. On...

CVE-2026-80781

CVE-2026-80781 is an out-of-bounds read in the Linux kernel's HID core subsystem. The function hid_set_field() passes field->usage + offset to hid_dump_input() before validating that the offset is within field->report_count. When CONFIG_DEBUG_FS is enabled, hid_dump_input() dereferences the...

The vulnerability of the `komeda_fb_afbc_size_check()` function in the `drivers/gpu/drm/arm/display/komeda/komeda_framebuffer.c` file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to access protected information or cause a service failure.

The vulnerability of the komedafbafbcsizecheck function in the drivers/gpu/drm/arm/display/komeda/komedaframebuffer.c file, a part of the Direct Rendering Infrastructure DRI driver for the Linux kernel, is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability...

Important: Red Hat Security Advisory: gstreamer-plugins-bad-free security update

An update for gstreamer-plugins-bad-free is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2026-80700 drm/vmwgfx: validate external BO copy bounds for both stride paths

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate external BO copy bounds for both stride paths vmwexternalbocopy trusts caller-supplied offsets, strides, and heights and operates on imported dma-buf vmaps: - The equal-stride memcpy bound was clamped after...

CVE-2026-80700 drm/vmwgfx: validate external BO copy bounds for both stride paths

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate external BO copy bounds for both stride paths vmwexternalbocopy trusts caller-supplied offsets, strides, and heights and operates on imported dma-buf vmaps: - The equal-stride memcpy bound was clamped after...

Linux Distros Unpatched Vulnerability : CVE-2026-80579

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: clear fbinfo-mode before deleting a videomode fbsetvar can delete a mode from info-modelist when userspace passes FBACTIVATEINVMODE through...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098729)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098729 advisory. In the Linux kernel, the following vulnerability has been resolved: fbcon: Set fbdisplayi-mode to NULL when the mode is released Recently, we discovered the followi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098995)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098995 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/gem: Acquire references on GEM handles for framebuffers A GEM handle can be released while th...

Astra Linux – Vulnerability in Linux 5.10, Linux

The Linux kernel was found vulnerable due to out-of-bounds memory access in the drivers/video/fbdev/sm712fb.c:smtcfbread function. This vulnerability could allow local attackers to cause the kernel to crash...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/vc4: Do not check if plane-state-fb == state-fb Currently, when using non-blocking commits, the following kernel warnings can be observed: 110.908514 ------------ Cut here ------------ 110.908529 refcountt: Underflow; Use...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Video: fbdev: amba-clcd: Fixed refcount leak issues. In clcdfbofinitdisplay, we should call ofnodeput for the references returned by ofgraphgetnextendpoint and ofgraphgetremoteportparent, as these references have increased the...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm: Do not accidentally unreference the same framebuffer multiple times due to deadlock handling. If a deadlock occurs after the fb lookup in drmmodepageflipioctl, we proceed to unreference the fb and then retry the entire proce...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fbdev: sisfb: Fixed strbuf array overflow issue. The values of the variables xres and yres are stored in strbuf. These variables are obtained from strbuf1. The strbuf1 array contains digit characters, and a space if the array...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fbdev: omap: use threaded IRQ for LCD DMA When using touchscreens and framebuffers, the Nokia 770 easily crashes due to the following issue: BUG: scheduling while atomic: irq/144-ads7846/82/0x00010000 Linked modules include:...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: video: fbdev: cirrusfb: check pixclock to avoid divide by zero Perform a sanity check on the pixclock value to avoid division by zero. If the pixclock value is zero, the cirrusfb driver will round up pixclock to make the derived...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Video: fbdev: clcdfb: Fixed the refcount leak in clcdfbofvramsetup. In clcdfbofvramsetup, ofparsephandle returns a node pointer with the refcount incremented. We should use ofnodeput on it when it is no longer needed. Add the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fbdev/ep93xx-fb: Do not assign to struct fbinfo.dev. Do not assign the Linux device to struct fbinfo.dev. The call to registerframebuffer initializes the field to the fbdev device. Drivers should not override its value. Fixed a b...