CVE-2026-80579

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> fbdev: clear fb_info-&gt;mode before deleting a videomode<br /> <br /> fb_set_var() can delete a mode from info-&gt;modelist when userspace<br /> passes FB_ACTIVATE_INV_MODE through FBIOPUT_VSCREENINFO. The code<br /> checks that the mode being deleted is not the current info-&gt;var and<br /> that fbcon is not using it, but it does not check fb_info-&gt;mode.<br /> <br /> fb_info-&gt;mode may still point into the modelist entry being deleted.<br /> If the entry is freed, later mode sysfs reads through show_mode() can<br /> dereference a stale pointer.<br /> <br /> Clear fb_info-&gt;mode before calling fb_delete_videomode() when it<br /> matches the mode being removed.