CVE-2026-97604 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 vfb vfb.c vfb_remove cmap use after free

A vulnerability was found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2. It has been classified as very critical. This affects the function vfb_remove of the file drivers/video/fbdev/vfb.c of the component vfb. The manipulation of the argument cmap leads to use after free.

This vulnerability is listed as CVE-2026-97604. The attack must be carried out locally. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More