VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 15, 2025

fbcon: fix integer overflow in fbcon_do_set_font

CVE-2025-39967

Description

In the Linux kernel, the following vulnerability has been resolved:

fbcon: fix integer overflow in fbcon_do_set_font

Fix integer overflow vulnerabilities in fbcon_do_set_font() where font size calculations could overflow when handling user-controlled font parameters.

The vulnerabilities occur when: 1. CALC_FONTSZ(h, pitch, charcount) performs h * pith * charcount multiplication with user-controlled values that can overflow. 2. FONT_EXTRA_WORDS * sizeof(int) + size addition can also overflow 3. This results in smaller allocations than expected, leading to buffer overflows during font data copying.

Add explicit overflow checking using check_mul_overflow() and check_add_overflow() kernel helpers to safety validate all size calculations before allocation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

204

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.

CVE-2025-39967 · VYPR