CVE-2026-74424

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the fbcon component when a framebuffer's modelist changes. The function fbcon new modelist() processes consoles mapped to the framebuffer; if fb display[i].mode is set, it reads vc cons[i].d and passes the vc num to fbcon set disp(). The issue arises because fbcon set disp() sets fb display[i].mode before verifying if vc data is valid, and fbcon deinit() fails to clear the mode after vc data is freed. Consequently, fbcon new modelist() attempts to dereference a NULL vc data pointer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.