fbdev fixes for 7.3-rc3:

- vt core: prevent potential out of bounds read on font change
 - fbcon: prevent out of bounds read when logo bigger than screen
 - atafb: limit SuperBlitter operations to supported layouts only
 - vfb: fix driver removal cleanup sequence
 - ssd1307fb: fix possible NULL pointer dereference on missing match data
 - omapfb: Fix sparse warning in panel_enabled()
 -----BEGIN PGP SIGNATURE-----
 
 iHUEABYKAB0WIQS86RI+GtKfB8BJu973ErUQojoPXwUCaqUOqgAKCRD3ErUQojoP
 XzVJAQDnJRpRl9+xwTyUrE3iJk4SllnV6SF5td3AnkUZrjTbcAEA7zCEnH0jwfJ1
 NsU/EKj2+PleQ0+SGRBKHIoZPEC1bQU=
 =T0+q
 -----END PGP SIGNATURE-----

Merge tag 'fbdev-for-7.3-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/deller/linux-fbdev

Pull fbdev fixes from Helge Deller:
 "Two patches for VT core code and fbcon prevent potential out-of-bounds
  reads on font or screen size changes, one fix limits the Superblitter
  in atafb to supported modes only, and some minor fixes for vfb,
  ssd1307fb and omapfb"

* tag 'fbdev-for-7.3-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/deller/linux-fbdev:
  fbdev: vfb: defer cleanup until the last reference
  fbdev: atafb: Restrict SuperBlitter to supported formats
  fbdev: ssd1307fb: fix NULL pointer dereference on missing match data
  fbcon: Fix KASAN slab-out-of-bounds Read in fbcon_prepare_logo
  fbdev: omapfb: Fix __be32 sparse warning in panel_enabled()
  vt: hide cursor prior to font changes to avoid out-of-bound reads
This commit is contained in:
Linus Torvalds 2026-09-12 08:06:04 -07:00
commit 31a4327ffe
6 changed files with 32 additions and 10 deletions