CVE-2026-80786
Received Received - Intake

Linux Kernel Privilege Escalation via FBIOPUT_VSCREENINFO

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: fbdev: Wrap user-invoked calls to fb_set_var() in helper Handle fbcon during display updates in fb_set_var_from_user(). Check with fbcon if the mode change is possible, update hardware state and finally update fbcon. Update all callers. Only the FBIOPUT_VSCREENINFO ioctl currently does all steps. Other mode-changes callers in sysfs and driver code are missing fbcon-related steps. With the new helper, ps3fb and sh_mobile_lcdcfb no longer maintain fbcon state themselves.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-04
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-80786
EUVD
EUVD-2026-71429

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves improper handling of display mode changes in the framebuffer subsystem. The issue arises because certain operations bypass necessary checks and updates required for the framebuffer console (fbcon) during mode changes. This can lead to inconsistent display states or crashes.

Detection Guidance

This vulnerability is specific to the Linux kernel's fbdev subsystem and does not have a direct network-based detection method. To check for affected systems, verify if your kernel version includes the fix for CVE-2026-80786 by examining kernel logs or running uname -a to compare against patched versions.

Impact Analysis

If exploited, this vulnerability could cause system instability, crashes, or display corruption when changing display modes. Users might experience graphical glitches, freezes, or unexpected behavior in applications relying on the framebuffer.

Mitigation Strategies

Apply the latest kernel update provided by your Linux distribution to ensure the fbdev vulnerability is patched. If immediate patching is not possible, restrict access to the FBIOPUT_VSCREENINFO ioctl and monitor for unusual display mode changes as a temporary workaround.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80786. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart