CVE-2026-80786

A flaw was found in the fbdev subsystem of the Linux kernel. This vulnerability occurs because certain user-invoked display mode changes, specifically those not using the FBIOPUT_VSCREENINFO ioctl, fail to properly update the fbcon state. A local user could potentially exploit this by triggering a display mode change, leading to an inconsistent display state and potentially a denial of service.

This vulnerability is rated with a Low severity because exploitation requires local access with privileges to interact with framebuffer sysfs or device interfaces, and any resulting impact is limited to local display state inconsistencies or denial of service. Standard Red Hat Enterprise Linux server environments typically do not expose direct framebuffer device controls to unprivileged users. Consequently, the risk of arbitrary code execution or confidentiality loss is absent, restricting potential harm to local console disruption.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.