---
id: CVE-2026-80786
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  fbdev: Wrap user-invoked calls to fb_set_var() in helper

  Handle fbcon during display updates in fb_set_var_from_user()
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  fbdev: Wrap user-invoked calls to fb_set_var() in helper

  Handle fbcon during display updates in fb_set_var_from_user(). Check
  with fbcon if the mode change is possible…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    ed7e9715849abd0816b8487b0d12ebd05d6e938b
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    07f7e46833f71472e30da54a50dacdf48521bdd3
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    6f611e5e5f3327cf2e2daabe6ee5acac58cc784e
  - Linux 2.6.12
published: '2026-09-04'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T11:17:52.307'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-80786'
references:
  - url: 'https://git.kernel.org/stable/c/07f7e46833f71472e30da54a50dacdf48521bdd3'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/6f611e5e5f3327cf2e2daabe6ee5acac58cc784e'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/ed7e9715849abd0816b8487b0d12ebd05d6e938b'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00198
epssPercentile: 0.08888
ingestedAt: '2026-10-15T11:00:41.662Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

fbdev: Wrap user-invoked calls to fb_set_var() in helper

Handle fbcon during display updates in fb_set_var_from_user(). Check
with fbcon if the mode change is possible, update hardware state and
finally update fbcon. Update all callers.

Only the FBIOPUT_VSCREENINFO ioctl currently does all steps. Other
mode-changes callers in sysfs and driver code are missing fbcon-related
steps.

With the new helper, ps3fb and sh_mobile_lcdcfb no longer maintain
fbcon state themselves.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.