Description
An issue was discovered in set_con2fb_map in drivers/video/fbdev/core/fbcon.c in the Linux kernel before 6.2.12. Because an assignment occurs only for the first vc, the fbcon_registered_fb and fbcon_display arrays can be desynchronized in fbcon_mode_deleted (the con2fb_map points at the old fb_info).
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.1.25-1 | — |
| Debian 13 | linux | 6.1.25-1 | — |
| Debian 12 | linux | 6.1.25-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | linux-oem-6.1 | 6.1.0-1012.12 | — |
| Ubuntu 22.04 LTS | linux-riscv +10 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-gke +25 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | bpftool | 7.2.0-362.18.1.el9_3 | RHSA-2024:0461 |
| RHEL 9 | rv +64 | 5.14.0-362.18.1.el9_3 | RHSA-2024:0461 |
| RHEL 8 | kernel-rt +12 | 4.18.0-553.rt7.342.el8_10 | RHSA-2024:2950 |
| RHEL 8 | perf +26 | 4.18.0-553.el8_10 | RHSA-2024:3138 |
| RHEL 7 | kernel-rt +10 | 3.10.0-1160.114.2.rt56.1266.el7 | RHSA-2024:1332 |
| RHEL 7 | perf +18 | 3.10.0-1160.114.2.el7 | RHSA-2024:1249 |
Show 11 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhev Hypervisor 4 | perf +2 | 4.18.0-372.87.1.el8_6 | RHSA-2024:0412 |
| RHEL 9.2 EUS | bpftool | 7.0.0-284.48.1.el9_2 | RHSA-2024:0448 |
| RHEL 9.2 EUS | kernel-rt +14 | 5.14.0-284.48.1.rt14.333.el9_2 | RHSA-2024:0439 |
| RHEL 9.2 EUS | perf +48 | 5.14.0-284.48.1.el9_2 | RHSA-2024:0448 |
| RHEL 9.0 EUS | kernel-rt +12 | 5.14.0-70.93.1.rt21.165.el9_0 | RHSA-2024:1306 |
| RHEL 9.0 EUS | perf +29 | 5.14.0-70.93.2.el9_0 | RHSA-2024:1250 |
| RHEL 8.8 EUS | perf +26 | 4.18.0-477.36.1.el8_8 | RHSA-2023:7539 |
| RHEL 8.6 EUS | perf +26 | 4.18.0-372.87.1.el8_6 | RHSA-2024:0412 |
| RHEL 8.4 TUS | kernel-rt +12 | 4.18.0-305.120.1.rt7.196.el8_4 | RHSA-2024:0563 |
| RHEL 8.4 TUS | perf +17 | 4.18.0-305.120.1.el8_4 | RHSA-2024:0562 |
| RHEL 8.4 E4S | perf +18 | 4.18.0-305.120.1.el8_4 | RHSA-2024:0562 |
| RHEL 8.4 AUS | perf +17 | 4.18.0-305.120.1.el8_4 | RHSA-2024:0562 |
| RHEL 8.2 TUS | kernel-rt +12 | 4.18.0-193.128.1.rt13.179.el8_2 | RHSA-2024:1269 |
| RHEL 8.2 TUS | perf +17 | 4.18.0-193.128.1.el8_2 | RHSA-2024:1268 |
| RHEL 8.2 E4S | perf +18 | 4.18.0-193.128.1.el8_2 | RHSA-2024:1268 |
| RHEL 8.2 AUS | perf +17 | 4.18.0-193.128.1.el8_2 | RHSA-2024:1268 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | kernel-rt +11 | 4.18.0-553.rt7.342.el8_10 | ALSA-2024:2950 |
| AlmaLinux 8 | perf +24 | 4.18.0-553.el8_10 | ALSA-2024:3138 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | kernel | 4.18.0-553.el8_10 | RXSA-2024:3138, RLSA-2024:3138 |
| Rocky Linux 8 | kernel-rt | 4.18.0-553.rt7.342.el8_10 | RLSA-2024:2950 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | kernel-64kb +6 | 5.14.21-150500.55.19.1 | SUSE-SU-2023:3311-1 |
| SLES 15 SP5 | kernel-azure +2 | 5.14.21-150500.33.14.1 | SUSE-SU-2023:3376-1 |
| SLES 15 SP5 | kernel-default-base | 5.14.21-150500.55.19.1.150500.6.6.4 | SUSE-SU-2023:3311-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLE Live Patching 15 SP5 | kernel-default | 5.14.21-150500.55.19.1 | SUSE-SU-2023:3311-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5-RT_Update_3 | 1-150500.11.5.1 | SUSE-SU-2023:3302-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_3 | 1-150500.11.3.4 | SUSE-SU-2023:3311-1 |
| SUSE Real Time Module 15 SP5 | kernel-rt +3 | 5.14.21-150500.13.11.1 | SUSE-SU-2023:3302-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.5 | dtb-aarch64 +10 | 5.14.21-150500.55.19.1 | SUSE-SU-2023:3311-1 |
| openSUSE Leap 15.5 | kernel-azure +2 | 5.14.21-150500.33.14.1 | SUSE-SU-2023:3376-1 |
| openSUSE Leap 15.5 | kernel-default-base | 5.14.21-150500.55.19.1.150500.6.6.4 | SUSE-SU-2023:3311-1 |
| openSUSE Leap 15.5 | kernel-rt +3 | 5.14.21-150500.13.11.1 | SUSE-SU-2023:3302-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | hyperv-daemons | 5.15.122.1-1 | — |
| Azure Linux 2 (CBL-Mariner) | kernel | 5.15.122.1-2 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | bpftool | 7.2.0-362.18.0.1.el9_3 | ELSA-2024-12094, ELSA-2024-0461 |
| Oracle Linux 9 | rv +25 | 5.14.0-362.18.0.1.el9_3 | ELSA-2024-12094, ELSA-2024-0461 |
| Oracle Linux 8 | perf +19 | 4.18.0-553.el8_10 | ELSA-2024-3138 |
| Oracle Linux 7 | perf +12 | 3.10.0-1160.114.2.0.1.el7 | ELSA-2024-1249 |
Advisories 28
- ALSA-2024:3138 Moderate: kernel security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:2950 Moderate: kernel-rt security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2024:2950 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:3138 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:1332 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2024:1306 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2024:1269 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2024:1250 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2024:1268 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2024:1249 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2024:0562 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2024:0563 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2024:0461 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2024:0448 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2024:0439 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2024:0412 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2023:7539 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 10, 2026
- RXSA-2024:3138 Moderate: kernel security, bug fix, and enhancement update Rocky Linux Security Advisories · May 29, 2026
- RLSA-2024:2950 Moderate: kernel-rt security and bug fix update Rocky Linux Security Advisories · Feb 5, 2026
- RLSA-2024:3138 Moderate: kernel security, bug fix, and enhancement update Rocky Linux Security Advisories · Feb 4, 2026
- SUSE-SU-2023:3311-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:3376-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:3302-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2023-1775 Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff BSI CERT-Bund (WID) · Aug 13, 2024
- ELSA-2024-3138 Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · May 23, 2024
- ELSA-2024-1249 Important: kernel security and bug fix update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Mar 20, 2024
- ELSA-2024-0461 Important: kernel security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Mar 7, 2024
- ELSA-2024-12094 Important: kernel security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jan 26, 2024