fbcon

A recently assigned CVE, CVE-2025-38198, identifies a memory-safety bug in the Linux kernel's framebuffer console subsystem (fbcon) that can trigger an array-index-out-of-bounds error when the system processes writes to the fbcon store_modes sysfs node. The flaw is rooted in insufficient...

A small but important Linux kernel hardening landed this month: the framebuffer console (fbcon) subsystem was patched to clear stale pointers by setting fb_display*->mode to NULL when a framebuffer mode is released, closing a use‑after‑free discovered by syzkaller that could otherwise allow a...