Hi Linus,

please pull the second half of fbdev fixes for this merge window:

Two patches for generic fbdev & fbcon code which fixes the handling of
modelists and prevents a potential NULL ptr dereference in the console code.

Five patches fix various missed cleanups in the error path of various fbdev
drivers.

And Uwe Kleine-König contributed one cleanup patch to use named initializers
in the vga16fb driver.

Thanks!
Helge

----------------------------------------------------------------

The following changes since commit 4708cac0e22cfd217f48f7cec3c35e5922efcccd:

  Merge tag 'staging-7.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging (2026-06-22 12:43:16 -0700)

are available in the Git repository at:

  http://git.kernel.org/pub/scm/linux/kernel/git/deller/linux-fbdev.git tags/fbdev-for-7.2-rc1-2

for you to fetch changes up to 7f08fc10fa3d3366dc3af723970bd03d7d6d10e3:

  fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var (2026-06-26 15:12:45 +0200)

----------------------------------------------------------------
additional fbdev fixes & cleanups for 7.2-rc1:

Fixes:
- fbcon: fix NULL pointer dereference for a console without vc_data [Ian Bridges]
- fbdev: fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var [Ian Bridges]

Fixes in failure paths:
- pm2fb: unwind write-cache setting on probe failure [Haoxiang Li]
- goldfishfb: fail pan display on base-update timeout [Pengpeng Hou]
- viafb: return error on DMA copy time-out [Pengpeng Hou]
- fbcon: fix out-of-bounds read in error path of fbcon_do_set_font() [Mingyu Wang]
- fbdev: fix modelist use-after-free in store_modes() [Ian Bridges]

Code cleanup:
- vga16fb: clean up platform_device_id table [Uwe Kleine-König]

----------------------------------------------------------------
Haoxiang Li (1):
      fbdev: pm2fb: unwind WC setup on probe failure

Ian Bridges (3):
      fbdev: fix use-after-free in store_modes()
      fbcon: fix NULL pointer dereference for a console without vc_data
      fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var

Mingyu Wang (1):
      fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()

Pengpeng Hou (2):
      fbdev: goldfishfb: fail pan display on base-update timeout
      fbdev: viafb: return an error when DMA copy times out

Uwe Kleine-König (1):
      fbdev: vga16fb: Drop unused assignment of platform_device_id driver data

 drivers/video/fbdev/core/fbcon.c   | 14 +++++++++++---
 drivers/video/fbdev/core/fbmem.c   | 12 ++++++++++++
 drivers/video/fbdev/core/fbsysfs.c | 10 +++++++++-
 drivers/video/fbdev/goldfishfb.c   | 13 +++++++++----
 drivers/video/fbdev/pm2fb.c        |  1 +
 drivers/video/fbdev/vga16fb.c      |  4 ++--
 drivers/video/fbdev/via/via-core.c |  7 +++++--
 7 files changed, 49 insertions(+), 12 deletions(-)