CVE-2026-64245

In the Linux kernel, the following vulnerability has been resolved:

fbdev: modedb: fix a possible UAF in fbfindmode()

If modeoption is NULL, it is assigned from modeoption_buf:

if (!modeoption) { fbgetoptions(NULL, &modeoptionbuf); modeoption = modeoptionbuf; }

Later, name is assigned from mode_option:

const char *name = mode_option;

However, modeoptionbuf is freed before name is no longer used:

kfree(modeoptionbuf);

while name is still accessed by:

if ((name_matches(db[i], name, namelen) ||

Since name aliases modeoptionbuf, this may result in a use-after-free.

Fix this by extending the lifetime of modeoptionbuf until the end of the function by using scope-based resource management for cleanup.