CVE-2026-23236

fbdev: smscufx: properly copy ioctl memory to kernelspace

High · published March 4, 2026

CVSS v3.1
7.3
EPSS
0%
Percentile
11.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

fbdev: smscufx: properly copy ioctl memory to kernelspace

The UFX_IOCTL_REPORT_DAMAGE ioctl does not properly copy data from

userspace to kernelspace, and instead directly references the memory,

which can cause problems if invalid data is passed from userspace. Fix

this all up by correctly copying the memory before accessing it within

the kernel.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00214 · 11.2th percentile
Published
2026-03-04T14:36Z
EPSS history
Timeline
  • 04 MAR 14:36Z
    fbdev: smscufx: properly copy ioctl memory to kernelspace
    cvelistv5