Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fbdev: tridentfb: fixed a potential memory leak in tridentpciprobe In tridentpciprobe, the memory allocated for modelist using fbvideomodetomodelist is not freed during subsequent error paths. This issue was addressed by calling...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fbdev/ep93xx-fb: Do not assign to struct fbinfo.dev. Do not assign the Linux device to struct fbinfo.dev. The call to registerframebuffer initializes the field to the fbdev device; drivers should not override this value. Fixed a...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: video: fbdev: sm712fb: Fixed a crash in smtcfbwrite When the sm712fb driver writes three bytes to the framebuffer, the driver crashes. The issue is due to an inability to handle a page fault for the address: ffffc90001ffffff. RIP...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fbdev: fbcon: A out-of-bounds read occurred in the errout section of fbcondosetfont. When fbcondosetfont fails e.g., due to a memory allocation failure within vcresize under heavy memory pressure, it jumps to the errout label to...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fbdev: hecubafb: A potential memory leak has been fixed in hecubafbprobe. The memory allocated for pagerefs in fbdeferredioinit is not freed on the error path. This issue was addressed by calling fbdeferrediocleanup...

SUSE CVE-2026-97604

In the Linux kernel, the following vulnerability has been resolved: fbdev: vfb: defer cleanup until the last reference FBIOGETCMAP takes a shallow snapshot of info-cmap and performs the usercopy after dropping info-lock. vfbremove frees the colormap immediately after unregistering the framebuffer...

ROS-20260930-73-0126

The vulnerability of the ufxopsioctl function in the Linux kernel’s drivers/video/fbdev/smscufx.c module is related to the assignment of an untrusted pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2026-97604

In the Linux kernel, the following vulnerability has been resolved: fbdev: vfb: defer cleanup until the last reference FBIOGETCMAP takes a shallow snapshot of info-cmap and performs the usercopy after dropping info-lock. vfbremove frees the colormap immediately after unregistering the framebuffer...

DEBIAN-CVE-2026-97604

In the Linux kernel, the following vulnerability has been resolved: fbdev: vfb: defer cleanup until the last reference FBIOGETCMAP takes a shallow snapshot of info-cmap and performs the usercopy after dropping info-lock. vfbremove frees the colormap immediately after unregistering the framebuffer...

AZL-104466 CVE-2026-97604 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: fbdev: vfb: defer cleanup until the last reference FBIOGETCMAP takes a shallow snapshot of info-cmap and performs the usercopy after dropping info-lock. vfbremove frees the colormap immediately after unregistering the framebuffer...

UBUNTU-CVE-2026-97604

In the Linux kernel, the following vulnerability has been resolved: fbdev: vfb: defer cleanup until the last reference FBIOGETCMAP takes a shallow snapshot of info-cmap and performs the usercopy after dropping info-lock. vfbremove frees the colormap immediately after unregistering the framebuffer...

EUVD-2026-86735

In the Linux kernel, the following vulnerability has been resolved: fbdev: vfb: defer cleanup until the last reference FBIOGETCMAP takes a shallow snapshot of info-cmap and performs the usercopy after dropping info-lock. vfbremove frees the colormap immediately after unregistering the framebuffer...

CVE-2026-97604 fbdev: vfb: defer cleanup until the last reference

In the Linux kernel, the following vulnerability has been resolved: fbdev: vfb: defer cleanup until the last reference FBIOGETCMAP takes a shallow snapshot of info-cmap and performs the usercopy after dropping info-lock. vfbremove frees the colormap immediately after unregistering the framebuffer...

CVE-2026-97604

The Linux kernel contains a use-after-free vulnerability within the fbdev: vfb driver. The issue occurs because FBIOGETCMAP takes a shallow snapshot of info->cmap and performs a usercopy after dropping the info->lock . Simultaneously, vfb_remove() may free the colormap immediately after unr...

CVE-2026-97604 fbdev: vfb: defer cleanup until the last reference

In the Linux kernel, the following vulnerability has been resolved: fbdev: vfb: defer cleanup until the last reference FBIOGETCMAP takes a shallow snapshot of info-cmap and performs the usercopy after dropping info-lock. vfbremove frees the colormap immediately after unregistering the framebuffer...

CVE-2026-97604

In the Linux kernel, the following vulnerability has been resolved: fbdev: vfb: defer cleanup until the last reference FBIOGETCMAP takes a shallow snapshot of info-cmap and performs the usercopy after dropping info-lock. vfbremove frees the colormap immediately after unregistering the framebuffer...

CVE-2026-97604: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fbdev: vfb: defer cleanup until the last reference FBIOGETCMAP takes a shallow snapshot of info-cmap and performs the usercopy after dropping info-lock. vfbremove frees the colormap immediately after unregistering the framebuffer...

PT-2026-98544

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the fbdev vfb component. The FBIOGETCMAP ioctl takes a shallow snapshot of info-cmap and performs a usercopy after releasing info-lock. However, vfb...

Linux Distros Unpatched Vulnerability : CVE-2026-97604

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: vfb: defer cleanup until the last reference FBIOGETCMAP takes a shallow snapshot of info-cmap and performs the usercopy after dropping info-lock. vfbremo...

CVE-2026-97604

In the Linux kernel, the following vulnerability has been resolved: fbdev: vfb: defer cleanup until the last reference FBIOGETCMAP takes a shallow snapshot of info-cmap and performs the usercopy after dropping info-lock. vfbremove frees the colormap immediately after unregistering the framebuffer...