CVE-2026-97604

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A slab-use-after-free issue exists in the fbdev vfb component. The FBIOGETCMAP ioctl takes a shallow snapshot of info->cmap and performs a usercopy after releasing info->lock. However, vfb remove() frees the colormap immediately after unregistering the framebuffer, even if an open file still maintains a reference to fb info. This allows a concurrent driver unbind to free the colormap while the ioctl is copying it to userspace, leading to a memory access violation in the copy to user() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.