Threats tagged 'ghsa-8fh7-qq2h-xhh6'

A use-after-free vulnerability in the Linux kernel's framebuffer device (fbdev) virtual framebuffer (vfb) driver was resolved. The issue occurs because the colormap is freed immediately after unregistering the framebuffer, even if an open file still holds a reference, leading to a potential use-after-free during an ioctl operation. The fix defers cleanup until the last reference is released, preventing concurrent access to freed memory.