Description
In the Linux kernel, the following vulnerability has been resolved: fbdev: Wrap user-invoked calls to fb_set_var() in helper Handle fbcon during display updates in fb_set_var_from_user(). Check with fbcon if the mode change is possible, update hardware state and finally update fbcon. Update all callers. Only the FBIOPUT_VSCREENINFO ioctl currently does all steps. Other mode-changes callers in sysfs and driver code are missing fbcon-related steps. With the new helper, ps3fb and sh_mobile_lcdcfb no longer maintain fbcon state themselves.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 3130e7bf43ecfe3a15bcf90b9698e0764a2d8d08affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < d33589eff3d40439b3c83e8da0d07d20df797d50affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < ed7e9715849abd0816b8487b0d12ebd05d6e938baffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 07f7e46833f71472e30da54a50dacdf48521bdd3affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 6f611e5e5f3327cf2e2daabe6ee5acac58cc784eaffected
Linux Linux
Default version status: affected
2.6.12affected0 to < 2.6.12unaffected6.6.160 to ≤ 6.6.*unaffected6.12.114 to ≤ 6.12.*unaffected6.18.57 to ≤ 6.18.*unaffected7.1.11 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/3130e7bf43ecfe3a15bcf90b9698e0764a2d8d08 ↗
- https://git.kernel.org/stable/c/d33589eff3d40439b3c83e8da0d07d20df797d50 ↗
- https://git.kernel.org/stable/c/ed7e9715849abd0816b8487b0d12ebd05d6e938b ↗
- https://git.kernel.org/stable/c/07f7e46833f71472e30da54a50dacdf48521bdd3 ↗
- https://git.kernel.org/stable/c/6f611e5e5f3327cf2e2daabe6ee5acac58cc784e ↗