EUVD-2026-86735

In the Linux kernel, the following vulnerability has been resolved: fbdev: vfb: defer cleanup until the last reference FBIOGETCMAP takes a shallow snapshot of info-cmap and performs the usercopy after dropping info-lock. vfbremove frees the colormap immediately after unregistering the framebuffer...

CVE-2026-97604

The Linux kernel contains a use-after-free vulnerability within the fbdev: vfb driver. The issue occurs because FBIOGETCMAP takes a shallow snapshot of info->cmap and performs a usercopy after dropping the info->lock . Simultaneously, vfb_remove() may free the colormap immediately after unr...