PT-2026-91337

In the Linux kernel, the following vulnerability has been resolved: fbdev: Wrap user-invoked calls to fb set var in helper Handle fbcon during display updates in fb set var from user. Check with fbcon if the mode change is possible, update hardware state and finally update fbcon. Update all...

PT-2026-82195

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fbdev component where the fb set var function can delete a mode from the info-modelist when userspace provides FB ACTIVATE INV MODE via FBIOPUT VSCREENINFO. While...

fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO

...

DEBIAN-CVE-2026-31618

In the Linux kernel, the following vulnerability has been resolved: fbdev: tdfxfb: avoid divide-by-zero on FBIOPUTVSCREENINFO Much like commit 19f953e74356 "fbdev: fbpm2fb: Avoid potential divide by zero error", we also need to prevent that same crash from happening in the udlfb driver as it uses...

CVE-2026-31618

In the Linux kernel, the following vulnerability has been resolved: fbdev: tdfxfb: avoid divide-by-zero on FBIOPUTVSCREENINFO Much like commit 19f953e74356 "fbdev: fbpm2fb: Avoid potential divide by zero error", we also need to prevent that same crash from happening in the udlfb driver as it uses...

PT-2026-34955

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A division by zero occurs in the ps to hz function. This happens because hw sm750 crtc set mode calls ps to hz without verifying that the pixclock variable is non-zero. An attacker can...

UBUNTU-CVE-2026-23266

In the Linux kernel, the following vulnerability has been resolved: fbdev: rivafb: fix divide error in nv3arb A userspace program can trigger the RIVA NV3 arbitration code by calling the FBIOPUTVSCREENINFO ioctl on /dev/fb. When doing so, the driver recomputes FIFO arbitration parameters in nv3ar...

DEBIAN-CVE-2021-33655

When sending malicous data to kernel by ioctl cmd FBIOPUTVSCREENINFO,kernel will write memory out of bounds...

PT-2022-1374

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a buffer overflow in the Linux kernel, allowing an attacker to write memory out of bounds. This can be achieved by sending malicious data to the kernel using the...

PT-2024-11379

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue occurs when a userspace program performs an ioctl FBIOPUT VSCREENINFO, passing a fb var screeninfo struct with only xres, yres, and bits per pixel fields, and their values. If...