In the Linux kernel, the following vulnerability has been resolved:
fbdev: fbcon: release buffer when fbcon_do_set_font() failed
syzbot is reporting memory leak at fbcon_do_set_font() [1], for commit a5a923038d70 ("fbdev: fbcon: Properly revert changes when vc_resize() failed") missed that the buffer might be newly allocated by fbcon_set_font().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.86-53.137Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perfUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Sep 22, 2025 | Sep 22, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libs | Mar 10, 2026 | Mar 10, 2026 |
| Ubuntu | — | Upgrade linux-kvmUpgrade linuxUpgrade linux-nvidiaUpgrade linux-oracleUpgrade linux-intel-iotg-5.15Upgrade linux-gkeopUpgrade linux-gkeUpgrade linux-intel-iotgUpgrade linux-ibmUpgrade linux-lowlatencyUpgrade linux-azure-5.15Upgrade linux-oracle-5.15Upgrade linux-azureUpgrade linux-raspiUpgrade linux-nvidia-tegra-5.15Upgrade linux-hwe-5.15Upgrade linux-awsUpgrade linux-intel-iot-realtimeUpgrade linux-riscv-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-gcp-5.15Upgrade linux-aws-5.15Upgrade linux-realtimeUpgrade linux-gcpUpgrade linux-bluefield | Sep 26, 2025 | Sep 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub