CVE-2026-63826

A flaw was found in the Linux kernel's framebuffer device (fbdev) component. When the store_modes() function replaces a framebuffer's list of display modes, it fails to properly clear old pointers before freeing the old list. This can result in a use-after-free vulnerability, a type of memory corruption. A local user could exploit this to cause system instability or potentially execute arbitrary code.

This vulnerability is rated as Moderate severity rather than Important because successful exploitation requires local authenticated access, specific console unbinding or manipulation, and write access to framebuffer sysfs interfaces, significantly constraining potential attack vectors. Under default Red Hat Enterprise Linux deployments, access to the affected sysfs attributes and framebuffer device configuration is restricted to privileged users, minimizing risk in non-interactive and containerized environments. While memory corruption could theoretically allow denial of service or privilege escalation, the required sequence of console interactions makes practical exploitation complex.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.