CVE-2026-43123None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: fbcon: check return value of con2fb_acquire_newinfo() If fbcon_open() fails when called from con2fb_acquire_newinfo() then info->fbcon_par pointer remains NULL which i…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Nov 6.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.1%
In the Linux kernel, the following vulnerability has been resolved:
fbcon: check return value of con2fb_acquire_newinfo()
If fbcon_open() fails when called from con2fb_acquire_newinfo() then info->fbcon_par pointer remains NULL which is later dereferenced.
Add check for return value of the function con2fb_acquire_newinfo() to avoid it.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Linux >= d1baa4ffa677bf6986c460fcfd4cdaf8bfe66f0e < d3e535533767c85788529e626478718b7e95a59fLinux >= d1baa4ffa677bf6986c460fcfd4cdaf8bfe66f0e < 3b5a754ec86bc6064af9aca76eb191c2405e6b0cLinux >= d1baa4ffa677bf6986c460fcfd4cdaf8bfe66f0e < a785c4e2a999c2d51dfcf40d317cfb30cc735d2cLinux >= d1baa4ffa677bf6986c460fcfd4cdaf8bfe66f0e < 0b038c0be6827dd2dbb1ce4f8d92d97c80cbe9ccLinux >= d1baa4ffa677bf6986c460fcfd4cdaf8bfe66f0e < 11a93180a70bb3095a9bd80d113d9277e30d9959Linux >= d1baa4ffa677bf6986c460fcfd4cdaf8bfe66f0e < f57b61624c86ef8f87f6e6b7dd0755de03d90e89Linux >= d1baa4ffa677bf6986c460fcfd4cdaf8bfe66f0e < 011a0502801c8536f64141a2b61362c14f456544Linux 2.6.23Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99284Nonenet: skbuff: propagate shared-frag marker in skb_zerocopy()
CVE-2026-99283Nonenetfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
CVE-2026-99272Nonesmb: client: validate the data area in SMB2_read()
CVE-2026-99271NoneALSA: line6: Clear prev_fbuf on capture buffer release
CVE-2026-99273Noneksmbd: reserve space for the UTF-16 terminator in stream info
CVE-2026-99275Nonesmb: client: reject short SESSION_SETUP responses