CVE-2026-72313

A flaw was found in the Linux kernel's display rendering manager (DRM) framebuffer helper (drm/fb-helper). This vulnerability arises from incorrect synchronization with display controllers (CRTCs), where the system attempts to synchronize with an inactive controller. This can lead to display timeouts and potential system unresponsiveness, resulting in a Denial of Service (DoS).

This vulnerability is rated as having a Low impact because exploitation is constrained to local environments with active graphical display hardware and primarily results in display timeout warnings or temporary rendering delays rather than system crashes or privilege escalation. Typical enterprise server installations run headless without graphical framebuffers, leaving them largely unexposed. Furthermore, the issue only manifests under specific multi-head or inactive display controller configurations during framebuffer console synchronization.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.