Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-68296

In the Linux kernel, the following vulnerability has been resolved: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup Protect vga_switcheroo_client_fb_set() with console lock. Avoids OOB access in fbcon_remap_all(). Without holding the console lock the call races with switching outputs. VGA switcheroo calls fbcon_remap_all() when switching clients. The fbcon function uses struct fb_info.node, which is set by register_framebuffer(). As the fb-helper code currently sets up VGA swi
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:02dac2f45700441b3ccd27fae24feb12781730437d68441d5469876309994ebb
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/drm_fb_helper.c","drivers/video/fbdev/core/fbcon.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.34"},{"lessThan":"2.6.34","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.143","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.61","versionType":"semver"},{"lessThanOrEqual":"6.17.*","status":"unaffected","versi…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f842cf76d48f23eea61fe0fa9cc7e6d611a4a3ea2c0b2d515b0327c990eaafbb · sha256:3832954961417a8c… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/drm_fb_helper.c","drivers/video/fbdev/core/fbcon.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"711ebd961190def4c69ea24b2f0be75e995af24a","status":"affected","version":"6a9ee8af344e3bd7dbd61e67037096cdf7f83289","versionType":"git"},{"lessThan":"482330f8261b4bea8146d9bd69c1199e5dfcbb5c","status":"affected","version":"6a9ee8af344e3bd7dbd61e67037096cdf7f83289","versionType":"git"},{"lessThan":"05814c389b53d2f3a0b9eeb90ba7a05ba77c4c2a","status":"…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f842cf76d48f23eea61fe0fa9cc7e6d611a4a3ea2c0b2d515b0327c990eaafbb · sha256:3832954961417a8c… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/drm_fb_helper.c","drivers/video/fbdev/core/fbcon.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.34"},{"lessThan":"2.6.34","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.143","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.61","versionType":"semver"},{"lessThanOrEqual":"6.17.*","status":"unaffected","versi…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f842cf76d48f23eea61fe0fa9cc7e6d611a4a3ea2c0b2d515b0327c990eaafbb · sha256:3832954961417a8c… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/drm_fb_helper.c","drivers/video/fbdev/core/fbcon.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"711ebd961190def4c69ea24b2f0be75e995af24a","status":"affected","version":"6a9ee8af344e3bd7dbd61e67037096cdf7f83289","versionType":"git"},{"lessThan":"482330f8261b4bea8146d9bd69c1199e5dfcbb5c","status":"affected","version":"6a9ee8af344e3bd7dbd61e67037096cdf7f83289","versionType":"git"},{"lessThan":"05814c389b53d2f3a0b9eeb90ba7a05ba77c4c2a","status":"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f842cf76d48f23eea61fe0fa9cc7e6d611a4a3ea2c0b2d515b0327c990eaafbb · sha256:3832954961417a8c… · /containers/cna/affected/0

Source references

4 source assertions
{"url":"https://git.kernel.org/stable/c/05814c389b53d2f3a0b9eeb90ba7a05ba77c4c2a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f842cf76d48f23eea61fe0fa9cc7e6d611a4a3ea2c0b2d515b0327c990eaafbb · sha256:3832954961417a8c… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/482330f8261b4bea8146d9bd69c1199e5dfcbb5c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f842cf76d48f23eea61fe0fa9cc7e6d611a4a3ea2c0b2d515b0327c990eaafbb · sha256:3832954961417a8c… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/711ebd961190def4c69ea24b2f0be75e995af24a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f842cf76d48f23eea61fe0fa9cc7e6d611a4a3ea2c0b2d515b0327c990eaafbb · sha256:3832954961417a8c… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/eb76d0f5553575599561010f24c277cc5b31d003"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f842cf76d48f23eea61fe0fa9cc7e6d611a4a3ea2c0b2d515b0327c990eaafbb · sha256:3832954961417a8c… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer