The vulnerability of the store_modes() function in the drivers/video/fbdev/core/fbsysfs.c driver for kernel-based frame buffer devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the storemodes function in the drivers/video/fbdev/core/fbsysfs.c driver for kernel-based frame buffer devices in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073371)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073371 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fbnewmodelist to prevent null-ptr-deref in fbvideomodetovar info-var, a framebuffer's...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073372)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073372 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: fix use-after-free in storemodes storemodes replaces a framebuffer's modelist with modes...

AZL-92579 CVE-2026-63826 affecting package kernel for versions less than 6.6.144.1-2

In the Linux kernel, the following vulnerability has been resolved: fbdev: fix use-after-free in storemodes storemodes replaces a framebuffer's modelist with modes from userspace. On success it frees the old modelist with fbdestroymodelist. Two fields still point into that freed list. One pointer...

CVE-2026-63826: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fbdev: fix use-after-free in storemodes storemodes replaces a framebuffer's modelist with modes from userspace. On success it frees the old modelist with fbdestroymodelist. Two fields still point into that freed list. One pointer...

CVE-2025-38198: Improper Validation of Array Index

In the Linux kernel, the following vulnerability has been resolved: fbcon: Make sure modelist not set on unregistered console It looks like attempting to write to the "storemodes" sysfs node will run afoul of unregistered consoles: UBSAN: array-index-out-of-bounds in...