PT-2026-44314 · Linux · Linux

Published 2026-05-28 · Updated 2026-05-28 · CVE-2026-46191

Mitre

In the Linux kernel, the following vulnerability has been resolved:

fbcon: Avoid OOB font access if console rotation fails

Clear the font buffer if the reallocation during console rotation fails in fbcon rotate font(). The putcs implementations for the rotated buffer will return early in this case. See [1] for an example.

Currently, fbcon rotate font() keeps the old buffer, which is too small for the rotated font. Printing to the rotated console with a high-enough character code will overflow the font buffer.

v2:

• fix typos in commit message

Related Identifiers

CVE-2026-46191

Affected Products

Linux

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-46191 · Security Note
• https://git.kernel.org/stable/c/594973a2e54924d8ba31c9faac669fc1ba6fcb80 · Note
• https://git.kernel.org/stable/c/ab6c34b9829d5de03f1d08a47a2253729a6e7e27 · Note
• https://git.kernel.org/stable/c/e4ef723d8975a2694cc90733a6b888a5e2841842 · Note
• https://git.kernel.org/stable/c/7105d9f1387d63b15c9a860674fc92c959181f2f · Note
• https://git.kernel.org/stable/c/b44cc78ff46b96e72d333a3be6aaaa0a14797263 · Note