Null Pointer Dereference Vulnerability in Linux Kernel Affects Multiple Consoles

CVE-2026-74424

What is CVE-2026-74424?

A vulnerability in the Linux kernel leads to a risk of null pointer dereference in framebuffer consoles. The issue arises when the framebuffer's modelist changes, causing the kernel to attempt to access a console's data that may not exist. This can occur if functions modify console modes without first verifying the presence of the necessary data, leading to potential system instability. To address this issue, developers need to implement checks to ensure that console modes are only set when valid data is present and that they are cleared properly when data is no longer available.

References