In the Linux kernel, the following vulnerability has been resolved:
fbcon: fix integer overflow in fbcon_do_set_font
Fix integer overflow vulnerabilities in fbcon_do_set_font() where font size calculations could overflow when handling user-controlled font parameters.
The vulnerabilities occur when: 1. CALC_FONTSZ(h, pitch, charcount) performs h * pith * charcount multiplication with user-controlled values that can overflow. 2. FONT_EXTRA_WORDS * sizeof(int) + size addition can also overflow 3. This results in smaller allocations than expected, leading to buffer overflows during font data copying.
Add explicit overflow checking using check_mul_overflow() and check_add_overflow() kernel helpers to safety validate all size calculations before allocation.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade perfUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.245-241.976Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.194-135.217 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel6.12-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel6.12-headersUpgrade bpftoolUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel-modules-extraUpgrade kernel6.12Upgrade kernel-toolsUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-debuginfoUpgrade bpftool-debuginfoUpgrade perf6.12Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.12.53-69.119Upgrade python3-perfUpgrade kernel-livepatch-6.1.155-176.282Upgrade kernel-tools-develUpgrade python3-perf6.12Upgrade kernelUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-develUpgrade kernel-debuginfoUpgrade perfUpgrade python3-perf6.12-debuginfoUpgrade bpftool6.12Upgrade kernel-develUpgrade kernel6.12-libbpfUpgrade kernel6.12-tools-debuginfoUpgrade perf6.12-debuginfoUpgrade perf-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernel-headers | Nov 11, 2025 | Oct 15, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 13, 2025 | Nov 13, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jan 15, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Dec 12, 2025 | Dec 11, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 15, 2025 | Oct 15, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 15, 2025 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-macros | Dec 5, 2025 | Nov 11, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1097-oracleUpgrade linux-image-5.15.0-1100-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-170-genericUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-106-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1083-gkeopUpgrade linux-image-5.15.0-1094-ibmUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-170-lowlatencyUpgrade linux-image-oracle-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-gkeUpgrade linux-image-raspi-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-1041-nvidia-tegra-igxUpgrade linux-image-5.15.0-1110-azureUpgrade linux-image-5.15.0-170-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1052-nvidia-tegraUpgrade linux-image-oracle-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-gke-64k-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-gke-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-fips-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1095-nvidia-lowlatencyUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1096-gkeUpgrade linux-image-aws-fips-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-gkeop-5.15Upgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-gke-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1109-azure-fipsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-nvidia-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1092-intel-iot-realtimeUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1041-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1097-raspiUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-xilinxUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1099-realtimeUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-5.15.0-1100-aws-64kUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-gke-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-170-generic-lpaeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-5.15.0-170-generic-64kUpgrade linux-image-5.15.0-1064-xilinx-zynqmpUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1109-azureUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-generic-64kUpgrade linux-image-generic-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1095-intel-iotgUpgrade linux-image-5.15.0-1052-nvidia-tegra-rtUpgrade linux-image-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-genericUpgrade linux-image-gcp-6.8Upgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1100-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1095-nvidiaUpgrade linux-image-raspi-realtimeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-5.15.0-1092-kvmUpgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-fips-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-106-genericUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-5.15.0-170-fipsUpgrade linux-image-5.15.0-1100-gcp-fipsUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-gkeopUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-kvm-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-5.15.0-1100-aws-fips | Oct 30, 2025 | Oct 15, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Oct 15, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub