Impact
The Linux kernel bug involves missing framebuffer console updates when changing video modes. User-initiated mode changes via FBIOPUT_VSCREENINFO or other callers were not verifying whether the console could handle the new mode, updating the hardware, and then synchronizing fbcon state. This deficiency can cause the console and underlying graphics subsystem to become out of sync, resulting in incorrect rendering, display glitches, or even kernel crashes. The weakness stems from improper initialization of console state during mode transitions.
Affected Systems
The issue affects the Linux kernel’s framebuffer device implementation on any system using fbdev, including drivers such as ps3fb and sh_mobile_lcdcfb. The CVE does not specify a particular kernel release, so the fix applies to all kernels before the patch was merged. Users running older kernel versions that compile the fbdev module with fbcon support are potentially impacted.
Risk and Exploitability
No CVSS or EPSS score is published, and the vulnerability is not listed in the CISA KEV catalog. The flaw requires local access to invoke the offending ioctl or to trigger a sysfs or driver‑initiated mode change. Because the bug affects display hardware interaction, a successful exploit could lead to denial of service or instability on the target system. The associated weakness corresponds to CWE-665, improper initialization of system state.
OpenCVE Enrichment