Linux Kernel Vulnerability in DEC Alignment Test for Background Consoles

CVE-2026-98838

What is CVE-2026-98838?

A vulnerability in the Linux kernel allows for an out-of-bounds access due to an incorrect assumption during console updates. When certain font size modifications are made on invisible virtual consoles, the framebuffer backing buffer is not appropriately resized. This oversight can lead to KASAN warnings and potential exploitation if the console's visibility state is not carefully managed. The vulnerability highlights the importance of ensuring proper boundary checks during complex graphical updates.

References