CVE-2026-80580 fbdev: bound mode sysfs output to the sysfs buffer

In the Linux kernel, the following vulnerability has been resolved: fbdev: bound mode sysfs output to the sysfs buffer modestring uses snprintf which can return a value larger than the remaining buffer space. showmodes accumulates the return value into i without checking whether i has reached...

CVE-2026-80580

CVE-2026-80580 is a buffer overflow in the Linux kernel fbdev subsystem. The function mode_string() uses snprintf(), which can return a value larger than the remaining buffer space. show_modes() accumulates this return value without checking whether the offset has reached PAGE_SIZE , allowing the...

CVE-2026-80579 fbdev: clear fb_info->mode before deleting a videomode

In the Linux kernel, the following vulnerability has been resolved: fbdev: clear fbinfo-mode before deleting a videomode fbsetvar can delete a mode from info-modelist when userspace passes FBACTIVATEINVMODE through FBIOPUTVSCREENINFO. The code checks that the mode being deleted is not the current...

CVE-2026-80580 fbdev: bound mode sysfs output to the sysfs buffer

In the Linux kernel, the following vulnerability has been resolved: fbdev: bound mode sysfs output to the sysfs buffer modestring uses snprintf which can return a value larger than the remaining buffer space. showmodes accumulates the return value into i without checking whether i has reached...

SUSE CVE-2026-72016

In the Linux kernel, the following vulnerability has been resolved: cpu/hotplug: Fix NULL kobject warning in cpuhpsmtenable On arm64, when booting with maxcpus greater than the number of present CPUs e.g., QEMU -smp cpus=4,maxcpus=8, some CPUs are marked as 'present' but have not yet been...

CVE-2026-80580: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fbdev: bound mode sysfs output to the sysfs buffer modestring uses snprintf which can return a value larger than the remaining buffer space. showmodes accumulates the return value into i without checking whether i has reached...

PT-2026-82196

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fbdev component where the mode string function uses snprintf, which may return a value exceeding the remaining buffer space. The show modes function accumulates th...

Linux Distros Unpatched Vulnerability : CVE-2026-80580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: bound mode sysfs output to the sysfs buffer modestring uses snprintf which can return a value larger than the remaining buffer space. showmodes accumulat...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098839)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098839 advisory. In the Linux kernel, the following vulnerability has been resolved: selinux: allow multiple opens of /sys/fs/selinux/policy Currently there can only be a single open...

SUSE CVE-2026-68374

In the Linux kernel, the following vulnerability has been resolved: usb: core: sysfs: add lock to bosdescriptorsread Add a lock to the function bosdescriptorsread. This function accesses udev-bos, which could be simultaneously freed in usbresetandverifydevice, a function that is commonly called i...

Linux kernel DoS

The vulnerability of the setupport and destroyport functions in the drivers/infiniband/core/sysfs.c driver of the Linux operating system’s InfiniBand kernel is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: usb: core: sysfs: add lock to bosdescriptorsread A lock has been added to the function bosdescriptorsread. This function accesses udev-bos, which might be freed simultaneously in usbResetandverifydevice, a function that is common...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: cpu/hotplug: Fixed a NULL kobject warning in cpuhpsmtenable. On ARM64, when booting with maxcpus greater than the number of existing CPUs e.g., in QEMU with -smp 4,maxcpus=8, some CPUs are marked as “present” but have not yet bee...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: put stats for schemeadddirs internal error The damonsysfsschemeadddirs function sets the triedregions directory after the stats directory is set up. When the setup of the triedregions directory fails, the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: fixed the issue where references to directories were placed in the wrong order in accesspatternadddirs. The patch addresses the issue where the error handling path in damonsysfsaccesspatternadddirs and...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: btrfs: Fixed a leak of kobject names for the sub-group spaceinfo. When the createspaceinfosubgroup function allocates elements of spaceinfo-subgroup, the kobjectinitandadd function is called for each element via...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: cxl/region: Resolved race conditions related to region deletion Sungwoo noticed that the sysfs mechanism for deleting a region might attempt to delete the same region multiple times. Additionally, there was no mechanism to...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: scsi: core: sysfs: Fix a hang issue when the device state is set via sysfs This fix addresses a regression introduced in the commit f0f82e2476f6 “scsi: core: Fix capacity setting to zero after offlineizing a device”. The problem...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Thermal: Core – The putdevice function should only be called after deviceregister fails. putdevice should not be called before a previous call to deviceregister. thermalcoolingdeviceregister does not follow this principle...

UBUNTU-CVE-2026-74604

In the Linux kernel, the following vulnerability has been resolved: Revert "thermal/drivers/hwmon: Cleanup coding style a bit" Revert commit 030a48b0f6ce "thermal/drivers/hwmon: Cleanup coding style a bit" that introduced a use-after-free into the error path of thermaladdhwmonsysfs by removing a...