CVE-2026-72267

fbdev: carminefb: fix potential memory leak in alloc_carmine_fb()

N/A

Published: August 15, 2026 at 05:54 AM UTC

Updated: August 17, 2026 at 06:18 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() The memory allocated for modelist in fb_videomode_to_modelist() is not freed in the subsequent error path. Fix that by calling fb_destroy_modelist()

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

2.6.27 ≤ v < 5.10.2612.6.27 ≤ v < 5.15.2122.6.27 ≤ v < 6.1.1782.6.27 ≤ v < 6.12.972.6.27 ≤ v < 6.18.402.6.27 ≤ v < 6.6.1452.6.27 ≤ v < 7.1.52.6.27 ≤ v < 7.22.6.272ece5f43b041b96fa2a05107a10a6b0ea0c03a3b

Vendor states this is fixed in 6069044e74b7510bf2f034ccd049bc962fb9c765 (fixed)

Vendor states this is fixed in 6fcca16a2b19c37f60693c56cbc0c923364ff3ef (fixed)

Vendor states this is fixed in 97b6c3f6e82a526d95dcfbfcf1c42ba44c61c3d6 (fixed)

Vendor states this is fixed in b51990be8411335c263b51e9f4def1e84bfaa923 (fixed)

Vendor states this is fixed in bcc43b2f7410eddb21f73e9a650499a6432c9383 (fixed)

Vendor states this is fixed in d21e6747f3f68dcce59b5d2205f98633d28f69eb (fixed)

Vendor states this is fixed in d81860691e4cfa14d596136ea2727f244e9e5950 (fixed)

Vendor states this is fixed in dae8f6ddc35cb1673dba32d2fd8f1f85cd377adf (fixed)

Vendor states this is fixed in 2.6.27 (unaffected)

Vendor states this is fixed in 5.10.261 (unaffected)

Vendor states this is fixed in 5.15.212 (unaffected)

Vendor states this is fixed in 6.1.178 (unaffected)