CVE-2024-26798

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the fbcon component of the Linux kernel, where an error in resource management within the fbcon do set font() function can lead to a system crash. This can be triggered when the vc resize() function fails, particularly affecting system or internal fonts that are not restored properly. The vulnerability can be exploited to cause a denial of service, and it has been demonstrated by Sirius using Syzkaller to crash the system on the next invocation of font get(). The issue is challenging to reproduce but can be aided by fault injection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.