In the Linux kernel, the following vulnerability has been resolved: fbdev: Wrap user-invoked calls to fb_set_var() in helper Handle fbcon during display updates in fb_set_var_from_user(). Check with fbcon if the mode change is possible, update hardware state and finally update fbcon. Update all callers. Only the FBIOPUT_VSCREENINFO ioctl currently does all steps. Other mode-changes callers in sysfs and driver code are missing fbcon-related steps. With the new helper, ps3fb and sh_mobile_lcdcfb no longer maintain fbcon state themselves.

An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - fbdev: Wrap user-invoked calls to fb_set_var() in helper Handle fbcon during display updates in     fb_set_var_from_user(). Check with fbcon if the mode change is possible, update hardware state and finally     update fbcon. Update all callers. Only the FBIOPUT_VSCREENINFO ioctl currently does all steps. Other mode-     changes callers in sysfs and driver code are missing fbcon-related steps. With the new helper, ps3fb and     sh_mobile_lcdcfb no longer maintain fbcon state themselves. (CVE-2026-80786)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
377900	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-3402)	Nessus	Amazon Linux Local Security Checks	Local	high
376443	Ubuntu 24.04 LTS / 26.04 LTS : Linux kernel vulnerabilities (USN-8959-1)	Nessus	Ubuntu Local Security Checks	Local	high
374970	Photon OS 5.0: Linux PHSA-2026-5.0-91-1001	Nessus	PhotonOS Local Security Checks	Local	high
343028	Linux Distros Unpatched Vulnerability : CVE-2026-80786	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-80786

high

Tenable Plugins

high

high

high

high