Executive brief
The Linux kernel's framebuffer (fbdev) subsystem manages the interface between applications and display hardware. A refactoring patch consolidates display mode-change operations to ensure all paths (ioctl, sysfs, driver code) properly coordinate with the framebuffer console (fbcon) layer. The patch ensures mode changes are validated, hardware is updated, and console state is synchronized consistently across all call paths, reducing risk of inconsistent display state.
Technical details
This is a structural fix rather than a traditional vulnerability patch. The issue was that multiple code paths could invoke fb_set_var() to change display modes, but only the FBIOPUT_VSCREENINFO ioctl performed all three required steps: checking with fbcon if the mode change is supported, updating hardware state, and updating fbcon. Sysfs and driver-internal mode-change callers were missing the fbcon coordination steps, potentially leading to inconsistent state. The fix introduces a new helper function fb_set_var_from_user() that encapsulates all three steps and updates all callers (fb_chrdev.c, fbsysfs.c, ps3fb, sh_mobile_lcdcfb) to use the centralized wrapper. This improves maintainability and correctness but does not fix a currently exploitable security flaw.
Affected products
- Linux Linux kernel various versions via fbdev subsystem
Timeline
- 2026-05-27: other: Patch authored by Thomas Zimmermann
- 2026-06-09: other: Patch merged into mainline
- 2026-09-04: disclosed: CVE-2026-80786 assigned