PT-2026-91309

In the Linux kernel, the following vulnerability has been resolved: fbdev: serialize mode sysfs access with lock fb info show mode, show modes, and store mode access fb info-modelist and fb info-mode without holding lock fb info. store modes takes lock fb info while replacing the modelist and...

CVE-2026-63826 fbdev: fix use-after-free in store_modes()

In the Linux kernel, the following vulnerability has been resolved: fbdev: fix use-after-free in storemodes storemodes replaces a framebuffer's modelist with modes from userspace. On success it frees the old modelist with fbdestroymodelist. Two fields still point into that freed list. One pointer...

CVE-2026-46065 fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info

In the Linux kernel, the following vulnerability has been resolved: fbdev: defio: Disconnect deferred I/O from the lifetime of struct fbinfo Hold state of deferred I/O in struct fbdeferrediostate. Allocate an instance as part of initializing deferred I/O and remove it only after the final mapping...

CVE-2026-46065

CVE-2026-46065 affects the Linux kernel framebuffer (fbdev) defio mechanism. The issue arises from disconnecting deferred I/O from the lifetime of struct fb_info, by holding state in struct fb_deferred_io_state and freeing the instance only after the final mapping closes. If fb_info/defio are fre...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: video: fbdev: vesafb: Fixed a use-after-free due to early fbinfo cleanup. The commit b3c9a924aab6 “fbdev: vesafb: Cleanup fbinfo in .fbdestroy instead of .remove fixed a use-after-free error where the vesafb driver freed the fbin...

Siemens SIMATIC S7-1500 NULL Pointer Dereference(CVE-2025-38214)

In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fbsetvar to prevent null-ptr-deref in fbvideomodetovar If fbaddvideomode in fbsetvar fails to allocate memory for fbvideomode, later it may lead to a null-ptr dereference in fbvideomodetovar, as the fbinfo is registere...

PT-2022-31579

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.15.41 through 5.15.45 Description A use-after-free issue due to early fb info cleanup was discovered. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 5.15.41...

PT-2022-31285

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.17.9 through v5.17.14 Description The issue is related to a use-after-free error due to early fb info cleanup in the Linux Kernel. This error was introduced in version v5.17.9 and fixed in version v5.17.14. The actual...

PT-2022-30946

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description A use-after-free issue due to early fb info cleanup was discovered. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...