CVE-2026-43123
MediumSummary
A vulnerability has been identified and resolved in the Linux kernel. The issue concerns the fbcon_open() function, which, if it fails, does not set the info->fbcon_par pointer, leading to later dereferencing of a NULL pointer.
Risk Assessment
This vulnerability could lead to system crashes or unexpected behavior of applications using framebuffers, potentially affecting system stability and security.
Recommendation
It is recommended to update the Linux kernel to the latest version where this vulnerability has been patched to minimize the risk associated with its exploitation.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: fbcon: check return value of con2fb_acquire_newinfo() If fbcon_open() fails when called from con2fb_acquire_newinfo() then info->fbcon_par pointer remains NULL which is later dereferenced. Add check for return value of the functi