Riskcovery

CVE-2026-43123

fbcon: check return value of con2fb_acquire_newinfo()

State
Published
Severity
Not scored
Published
May 6, 2026
Updated
May 11, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

fbcon: check return value of con2fb_acquire_newinfo()

If fbcon_open() fails when called from con2fb_acquire_newinfo() then info->fbcon_par pointer remains NULL which is later dereferenced.

Add check for return value of the function con2fb_acquire_newinfo() to avoid it.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d1baa4ffa677bf6986c460fcfd4cdaf8bfe66f0e to before d3e535533767c85788529e626478718b7e95a59fAffected
  • d1baa4ffa677bf6986c460fcfd4cdaf8bfe66f0e to before 3b5a754ec86bc6064af9aca76eb191c2405e6b0cAffected
  • d1baa4ffa677bf6986c460fcfd4cdaf8bfe66f0e to before a785c4e2a999c2d51dfcf40d317cfb30cc735d2cAffected
  • d1baa4ffa677bf6986c460fcfd4cdaf8bfe66f0e to before 0b038c0be6827dd2dbb1ce4f8d92d97c80cbe9ccAffected
  • d1baa4ffa677bf6986c460fcfd4cdaf8bfe66f0e to before 11a93180a70bb3095a9bd80d113d9277e30d9959Affected
  • d1baa4ffa677bf6986c460fcfd4cdaf8bfe66f0e to before f57b61624c86ef8f87f6e6b7dd0755de03d90e89Affected
  • d1baa4ffa677bf6986c460fcfd4cdaf8bfe66f0e to before 011a0502801c8536f64141a2b61362c14f456544Affected
LinuxLinux
  • 2.6.23Affected
  • before 2.6.23Not affected
  • 5.15.203 through 5.15.*Not affected
  • 6.1.165 through 6.1.*Not affected
  • 6.6.128 through 6.6.*Not affected
  • 6.12.75 through 6.12.*Not affected
  • 6.18.16 through 6.18.*Not affected
  • 6.19.6 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.