Buffer Overflow Vulnerability in Linux Kernel by Open Source Community

CVE-2026-80580

What is CVE-2026-80580?

A vulnerability in the Linux kernel's fbdev subsystem could lead to a buffer overflow due to improper handling of mode strings in sysfs output. The mode_string() function does not adequately check the buffer size when using snprintf(), which may allow for the return value to exceed the available space in the sysfs buffer. Consequently, if the modelist is lengthy, this oversight may cause the offset to surpass the allocated buffer size, leading to potential system crashes or instability. The fix involved introducing a size parameter to mode_string() and using scnprintf() to precisely control the bytes written, along with implementing checks to prevent offset overflow.

References