CVE-2026-64245

A flaw was found in the Linux kernel's framebuffer device fbdev subsystem. Specifically, within the fbfindmode function, a use-after-free UAF vulnerability exists. This occurs because a memory buffer is released while still being referenced, potentially allowing an attacker to access or manipulat...

fbdev: modedb: fix a possible UAF in fb_find_mode()

...

CVE-2026-64245

In the Linux kernel, the following vulnerability has been resolved: fbdev: modedb: fix a possible UAF in fbfindmode If modeoption is NULL, it is assigned from modeoptionbuf: if !modeoption fbgetoptionsNULL, &modeoptionbuf; modeoption = modeoptionbuf; Later, name is assigned from modeoption: const...

CVE-2026-64245

In the Linux kernel, the following vulnerability has been resolved: fbdev: modedb: fix a possible UAF in fbfindmode If modeoption is NULL, it is assigned from modeoptionbuf: if !modeoption fbgetoptionsNULL, &modeoptionbuf; modeoption = modeoptionbuf; Later, name is assigned from modeoption: const...

CVE-2026-64245

CVE-2026-64245 is a use-after-free vulnerability in the Linux kernel's fbdev subsystem, specifically in fb_find_mode() within modedb. When mode_option is NULL, it is assigned from mode_option_buf, and a pointer name aliases that buffer. The buffer is then freed via kfree() while name is still der...

PT-2026-64360

In the Linux kernel, the following vulnerability has been resolved: fbdev: modedb: fix a possible UAF in fb find mode If mode option is NULL, it is assigned from mode option buf: if !mode option fb get optionsNULL, &mode option buf; mode option = mode option buf; Later, name is assigned from mode...