Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64245

In the Linux kernel, the following vulnerability has been resolved: fbdev: modedb: fix a possible UAF in fb_find_mode() If mode_option is NULL, it is assigned from mode_option_buf: if (!mode_option) { fb_get_options(NULL, &mode_option_buf); mode_option = mode_option_buf; } Later, name is assigned from mode_option: const char *name = mode_option; However, mode_option_buf is freed before name is no longer used: kfree(mode_option_buf); while name is still accessed by: if
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:104d772577499d2c7d3bfd8a6442437aea957f4e88450e6412ac1c02760f6966
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/video/fbdev/core/modedb.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.4"},{"lessThan":"6.4","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.144","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.95","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.38","versionType":"semver"},{…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d773333aa248b05cf1cb3053119bb56f35641fc4a7b1aefd6cd10e0157efaa86 · sha256:58710409cdfeadeb… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/video/fbdev/core/modedb.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"c7dc382439f7b019e207055b52e9cec051d42fa9","status":"affected","version":"089d924d03d5c17b05d02992f57671ccfba1c4f0","versionType":"git"},{"lessThan":"f906347d75c7fc377041c6d3c535d0f08846aada","status":"affected","version":"089d924d03d5c17b05d02992f57671ccfba1c4f0","versionType":"git"},{"lessThan":"4d418cf8daf57e454b4d855bf9b2419fd8e6a540","status":"affected","version":"089d924d03d5…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d773333aa248b05cf1cb3053119bb56f35641fc4a7b1aefd6cd10e0157efaa86 · sha256:58710409cdfeadeb… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/video/fbdev/core/modedb.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.4"},{"lessThan":"6.4","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.144","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.95","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.38","versionType":"semver"},{…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d773333aa248b05cf1cb3053119bb56f35641fc4a7b1aefd6cd10e0157efaa86 · sha256:58710409cdfeadeb… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/video/fbdev/core/modedb.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"c7dc382439f7b019e207055b52e9cec051d42fa9","status":"affected","version":"089d924d03d5c17b05d02992f57671ccfba1c4f0","versionType":"git"},{"lessThan":"f906347d75c7fc377041c6d3c535d0f08846aada","status":"affected","version":"089d924d03d5c17b05d02992f57671ccfba1c4f0","versionType":"git"},{"lessThan":"4d418cf8daf57e454b4d855bf9b2419fd8e6a540","status":"affected","version":"089d924d03d5…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d773333aa248b05cf1cb3053119bb56f35641fc4a7b1aefd6cd10e0157efaa86 · sha256:58710409cdfeadeb… · /containers/cna/affected/0

Source references

5 source assertions
{"url":"https://git.kernel.org/stable/c/13b6f0cdd5cd5e60f682ec43134ab0e2024bd356"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d773333aa248b05cf1cb3053119bb56f35641fc4a7b1aefd6cd10e0157efaa86 · sha256:58710409cdfeadeb… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/4d418cf8daf57e454b4d855bf9b2419fd8e6a540"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d773333aa248b05cf1cb3053119bb56f35641fc4a7b1aefd6cd10e0157efaa86 · sha256:58710409cdfeadeb… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/85b6256469cebdac395e7447147e06b2e151014f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d773333aa248b05cf1cb3053119bb56f35641fc4a7b1aefd6cd10e0157efaa86 · sha256:58710409cdfeadeb… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/c7dc382439f7b019e207055b52e9cec051d42fa9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d773333aa248b05cf1cb3053119bb56f35641fc4a7b1aefd6cd10e0157efaa86 · sha256:58710409cdfeadeb… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/f906347d75c7fc377041c6d3c535d0f08846aada"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d773333aa248b05cf1cb3053119bb56f35641fc4a7b1aefd6cd10e0157efaa86 · sha256:58710409cdfeadeb… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer