Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-46191 Details

Description

In the Linux kernel, the following vulnerability has been resolved: fbcon: Avoid OOB font access if console rotation fails Clear the font buffer if the reallocation during console rotation fails in fbcon_rotate_font(). The putcs implementations for the rotated buffer will return early in this case. See [1] for an example. Currently, fbcon_rotate_font() keeps the old buffer, which is too small for the rotated font. Printing to the rotated console with a high-enough character code will overflow the font buffer. v2: - fix typos in commit message

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.1 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/46cf3646dea54baeaa2eafe3fb1ba769947f31b0 kernel.org
https://git.kernel.org/stable/c/524a6079395916fb3d790ef2bb46a1d2939b27dd kernel.org
https://git.kernel.org/stable/c/594973a2e54924d8ba31c9faac669fc1ba6fcb80 kernel.orgPatch
https://git.kernel.org/stable/c/7105d9f1387d63b15c9a860674fc92c959181f2f kernel.orgPatch
https://git.kernel.org/stable/c/ab6c34b9829d5de03f1d08a47a2253729a6e7e27 kernel.orgPatch

see all 8 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-125Out-of-bounds Read[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 2.6.15, < 6.6.140
>= 6.7, < 6.12.90
>= 6.13, < 6.18.32
>= 6.19, < 7.0.7

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

4 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-46191
NVD Published Date:
May 28, 2026
NVD Last Modified:
Jun 19, 2026
Source:
kernel.org
CVE-2026-46191 Details - Not Deferred