CVE-2026-74424Patch

LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: fbcon: fix NULL pointer dereference for a console without vc_data fbcon_new_modelist() runs when a framebuffer's modelist changes. For each console mapped to it with fb_display[i].mode set, it reads vc_cons[i].d and passes the vc_num to fbcon_set_disp(). This assumes a console with a mode set has a vc_data, but it can be NULL. fbcon_set_disp() sets fb_display[i].mode before it checks vc_data, and fbcon_deinit() leaves the mode set after the vc_data is freed. fbcon_new_modelist() then dereferences the NULL vc_data. Keep fb_display[i].mode set only while the console has a vc_data. Check vc_data before setting the mode in fbcon_set_disp(), and clear the mode in fbcon_deinit(). The existing mode check in fbcon_new_modelist() then skips such consoles.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
2 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Patch

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

CVE@CVEnew46d
Patch
CVE-2026-74424 In the Linux kernel, the following vulnerability has been resolved: fbcon: fix NULL pointer dereference for a console without vc_data fbcon_new_modelist() runs when… https://www.cve.org/CVERecord?id=CVE-2026-74424
Post summary
CVE-2026-74424 is a NULL pointer dereference in the Linux kernel's fbcon component that has been fixed, but the text offers no PoC, exploit details, active exploitation evidence, or explicit patch information.
00011939
57.9K followersView on X
Infoflowcloud@infoflowcloud46d
Patch
🚨*CVE* CVE-2026-74424 In the Linux kernel, the following vulnerability has been resolved: fbcon: fix NULL pointer dereference for a console without vc_data fbcon_new_modelist() runs when… https://www.cve.org/CVERecord?id=CVE-2026-74424 ----- Traducción: CVE-2026-74424 En … https://infoflow.cloud`
Post summary
The post indicates that CVE‑2026‑74424, a NULL‑pointer bug in the Linux kernel, has been fixed and provides technical details, but offers no PoC or evidence of exploitation.
0000038
98 followersView on X

Explore more

Back to dashboard