CVE-2026-64245

A flaw was found in the Linux kernel's framebuffer device fbdev subsystem. Specifically, within the fbfindmode function, a use-after-free UAF vulnerability exists. This occurs because a memory buffer is released while still being referenced, potentially allowing an attacker to access or manipulat...

CVE-2026-64245

In the Linux kernel, the following vulnerability has been resolved: fbdev: modedb: fix a possible UAF in fbfindmode If modeoption is NULL, it is assigned from modeoptionbuf: if !modeoption fbgetoptionsNULL, &modeoptionbuf; modeoption = modeoptionbuf; Later, name is assigned from modeoption: const...

CVE-2026-64245

The CVE-2026-64245 issue concerns the Linux kernel fbdev subsystem, specifically in fb_find_mode() within fbdev/modedb. The vulnerability arises when mode_option is NULL and is assigned from mode_option_buf via fb_get_options; later, name is derived from mode_option. If mode_option_buf is freed (...

PT-2026-64360

In the Linux kernel, the following vulnerability has been resolved: fbdev: modedb: fix a possible UAF in fb find mode If mode option is NULL, it is assigned from mode option buf: if !mode option fb get optionsNULL, &mode option buf; mode option = mode option buf; Later, name is assigned from mode...