CVE-2026-46191

Description

In the Linux kernel, the following vulnerability has been resolved: fbcon: Avoid OOB font access if console rotation fails Clear the font buffer if the reallocation during console rotation fails in fbcon_rotate_font(). The putcs implementations for the rotated buffer will return early in this case. See [1] for an example. Currently, fbcon_rotate_font() keeps the old buffer, which is too small for the rotated font. Printing to the rotated console with a high-enough character code will overflow the font buffer. v2: - fix typos in commit message

Is your site exposed to CVE-2026-46191?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0013

Probability of exploitation

0.03%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/594973a2e54924d8ba31c9faac669fc1ba6fcb80 https://git.kernel.org/stable/c/7105d9f1387d63b15c9a860674fc92c959181f2f https://git.kernel.org/stable/c/ab6c34b9829d5de03f1d08a47a2253729a6e7e27 https://git.kernel.org/stable/c/b44cc78ff46b96e72d333a3be6aaaa0a14797263 https://git.kernel.org/stable/c/e4ef723d8975a2694cc90733a6b888a5e2841842

Frequently Asked Questions

What is CVE-2026-46191? +

In the Linux kernel, the following vulnerability has been resolved: fbcon: Avoid OOB font access if console rotation fails Clear the font buffer if the reallocation during console rotation fails in fbcon_rotate_font(). The putcs implementations for the rotated buffer will return early in this case. See [1] for an example. Currently, fbcon_rotate_font() keeps the old buffer, which is too small for the rotated font. Printing to the rotated console with a high-enough character code will overflow the font buffer. v2: - fix typos in commit message

How do I check if I'm vulnerable to CVE-2026-46191? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.