CVE-2026-80580

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the fbdev component where the mode string() function uses snprintf(), which may return a value exceeding the remaining buffer space. The show modes() function accumulates this return value into the variable i without verifying if it has reached PAGE SIZE. If the modelist is sufficiently long, the offset can advance beyond the sysfs buffer. This is addressed by adding a size parameter to mode string(), utilizing scnprintf() to return only the bytes actually written, and implementing an early return in show modes() once the buffer is full.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.