AZL-99558

Dashboard / Vulnerabilities / AZL-99558

AZL-99558

Summary: CVE-2026-80786 affecting package kernel 6.6.157.1-1

Details: In the Linux kernel, the following vulnerability has been resolved: fbdev: Wrap user-invoked calls to fb_set_var() in helper Handle fbcon during display updates in fb_set_var_from_user(). Check with fbcon if the mode change is possible, update hardware state and finally update fbcon. Update all callers. Only the FBIOPUT_VSCREENINFO ioctl currently does all steps. Other mode-changes callers in sysfs and driver code are missing fbcon-related steps. With the new helper, ps3fb and sh_mobile_lcdcfb no longer maintain fbcon state themselves.

References: https://nvd.nist.gov/vuln/detail/CVE-2026-80786