[PATCH v3 0/3] fbdev: fix mode sysfs lifetime and bounds issues

From: Melbin K Mathew

Date: Wed Jul 01 2026 - 19:43:05 EST


This v3 adds a patch to clear fb_info->mode before deleting a
videomode through FBIOPUT_VSCREENINFO with FB_ACTIVATE_INV_MODE.

Patch 1 bounds mode sysfs output so show_modes() cannot advance the
sysfs buffer offset past PAGE_SIZE.

Patch 2 clears fb_info->mode before fb_delete_videomode() when it
matches the mode being removed via the FBIOPUT_VSCREENINFO ioctl.

Patch 3 serializes mode sysfs access with lock_fb_info(), including
store_mode(), show_mode(), and show_modes().

Changes in v3:
- Add patch to clear fb_info->mode in fb_set_var() INV_MODE path.


Melbin K Mathew (3):
fbdev: bound mode sysfs output to the sysfs buffer
fbdev: clear fb_info->mode before deleting a videomode
fbdev: serialize mode sysfs access with lock_fb_info()

drivers/video/fbdev/core/fbmem.c | 5 ++-
drivers/video/fbdev/core/fbsysfs.c | 59 ++++++++++++++++++++++++------
2 files changed, 51 insertions(+), 13 deletions(-)

--
2.39.5