fbdev: bitblit: bound-check glyph index in bit_cursor()

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-74635 · Microsoft / collected KEV context

cve-program · CVE-2026-74635

• https://git.kernel.org/stable/c/250159ace2dc53c1bdad267aa8da51b638748700
• https://git.kernel.org/stable/c/46336f476484f36145e5117e72d7b590f47433ee
• https://git.kernel.org/stable/c/bf750cfeacf4e47ac72dadc7f05839696efb8576
• https://git.kernel.org/stable/c/94134d70abf9273b70499d97d0adc9185ef21091
• https://git.kernel.org/stable/c/c1e7351767dd30fc574395c82121e4c67b882da3
• https://git.kernel.org/stable/c/bc9db0d879c655d5dfd8add32fd60f13e65d132c
• https://git.kernel.org/stable/c/9ea879862e66e354e616028c31b39aa3eb6d35d8
• https://git.kernel.org/stable/c/e033cbf3975a8465f879ebd5989dc35b04423a4d

No related operational record is retained in the current change model.