Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Linux Kernel: Data Corruption from User Input
CVE-2026-23236
Summary
The Linux kernel has fixed a bug that could allow malicious data from a computer user to cause problems for the operating system. This bug has been resolved, and users should ensure they have the latest kernel updates to protect their system. Users can check for updates and apply them to stay secure.
Original title
In the Linux kernel, the following vulnerability has been resolved:
fbdev: smscufx: properly copy ioctl memory to kernelspace
The UFX_IOCTL_REPORT_DAMAGE ioctl does not properly copy data from
us...
Original description
In the Linux kernel, the following vulnerability has been resolved:
fbdev: smscufx: properly copy ioctl memory to kernelspace
The UFX_IOCTL_REPORT_DAMAGE ioctl does not properly copy data from
userspace to kernelspace, and instead directly references the memory,
which can cause problems if invalid data is passed from userspace. Fix
this all up by correctly copying the memory before accessing it within
the kernel.
fbdev: smscufx: properly copy ioctl memory to kernelspace
The UFX_IOCTL_REPORT_DAMAGE ioctl does not properly copy data from
userspace to kernelspace, and instead directly references the memory,
which can cause problems if invalid data is passed from userspace. Fix
this all up by correctly copying the memory before accessing it within
the kernel.
- https://git.kernel.org/stable/c/061cfeb560aa3ddc174153dbe5be9d0b55eb7248
- https://git.kernel.org/stable/c/0634e8d650993602fc5b389ff7ac525f6542e141
- https://git.kernel.org/stable/c/120adae7b42faa641179270c067864544a50ab69
- https://git.kernel.org/stable/c/1c008ad0f0d1c1523902b9cdb08e404129677bfc
- https://git.kernel.org/stable/c/52917e265aa5f848212f60fc50fc504d8ef12866
- https://git.kernel.org/stable/c/6167af934f956d3ae1e06d61f45cd0d1004bbe1a
- https://git.kernel.org/stable/c/a0321e6e58facb39fe191caa0e52ed9aab6a48fe
- https://git.kernel.org/stable/c/f1e91bd4efeae48b0f42caed7e8ce2e3a0d05b02
Published: 4 Mar 2026 · Updated: 13 Mar 2026 · First seen: 6 Mar 2026