CVE-2020-28974: A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to rea...

Security readout for executives and security teams

This is a Linux kernel flaw in the console framebuffer path. A local attacker could potentially read privileged memory or crash the kernel. The provided sources identify Linux kernels before 5.9.7 and vendor security updates, but do not show remote attack capability or active exploitation. Exposure is most relevant on Linux systems running vulnerable kernels, especially where untrusted users can obtain local access. Appliances or distributions using affected Linux kernel branches may also be exposed until vendor-fixed packages are applied. Handle through normal vulnerability management with priority for multi-user Linux systems and critical infrastructure. The business risk is local information disclosure or service disruption, not proven remote compromise based on the provided evidence. Mitigation focus: Upgrade to Linux kernel 5.9.7 or a vendor-fixed kernel package.; Apply relevant Debian LTS or vendor security updates where applicable.; Check NetApp guidance if affected NetApp products are in use..

Prepared

Jun 5, 2026, 13:31 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.