Description
In the Linux kernel, the following vulnerability has been resolved:

fbdev: Wrap user-invoked calls to fb_set_var() in helper

Handle fbcon during display updates in fb_set_var_from_user(). Check
with fbcon if the mode change is possible, update hardware state and
finally update fbcon. Update all callers.

Only the FBIOPUT_VSCREENINFO ioctl currently does all steps. Other
mode-changes callers in sysfs and driver code are missing fbcon-related
steps.

With the new helper, ps3fb and sh_mobile_lcdcfb no longer maintain
fbcon state themselves.
Published: 2026-09-04
Score: n/a
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The Linux kernel bug involves missing framebuffer console updates when changing video modes. User-initiated mode changes via FBIOPUT_VSCREENINFO or other callers were not verifying whether the console could handle the new mode, updating the hardware, and then synchronizing fbcon state. This deficiency can cause the console and underlying graphics subsystem to become out of sync, resulting in incorrect rendering, display glitches, or even kernel crashes. The weakness stems from improper initialization of console state during mode transitions.

Affected Systems

The issue affects the Linux kernel’s framebuffer device implementation on any system using fbdev, including drivers such as ps3fb and sh_mobile_lcdcfb. The CVE does not specify a particular kernel release, so the fix applies to all kernels before the patch was merged. Users running older kernel versions that compile the fbdev module with fbcon support are potentially impacted.

Risk and Exploitability

No CVSS or EPSS score is published, and the vulnerability is not listed in the CISA KEV catalog. The flaw requires local access to invoke the offending ioctl or to trigger a sysfs or driver‑initiated mode change. Because the bug affects display hardware interaction, a successful exploit could lead to denial of service or instability on the target system. The associated weakness corresponds to CWE-665, improper initialization of system state.

Generated by OpenCVE AI on September 4, 2026 at 17:02 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the Linux kernel to a release that includes the fbdev mode‑change fix
  • If using a custom kernel, apply the patch from the provided Git commit to the fbdev source and rebuild
  • After updating, reboot the system and verify console operation after changing video modes

Generated by OpenCVE AI on September 4, 2026 at 17:02 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 04 Sep 2026 17:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-665

Fri, 04 Sep 2026 15:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: fbdev: Wrap user-invoked calls to fb_set_var() in helper Handle fbcon during display updates in fb_set_var_from_user(). Check with fbcon if the mode change is possible, update hardware state and finally update fbcon. Update all callers. Only the FBIOPUT_VSCREENINFO ioctl currently does all steps. Other mode-changes callers in sysfs and driver code are missing fbcon-related steps. With the new helper, ps3fb and sh_mobile_lcdcfb no longer maintain fbcon state themselves.
Title fbdev: Wrap user-invoked calls to fb_set_var() in helper
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-09-04T15:12:57.927Z

Reserved: 2026-08-26T14:34:25.793Z

Link: CVE-2026-80786

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-04T16:18:04.580

Modified: 2026-09-04T16:18:04.580

Link: CVE-2026-80786

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-04T20:15:14Z

Weaknesses