CVE-2026-72269

fbdev: uvesafb: fix potential memory leak in uvesafb_probe()

N/A
Published: August 15, 2026 at 05:54 AM UTC
Updated: August 17, 2026 at 06:18 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: fbdev: uvesafb: fix potential memory leak in uvesafb_probe() Due to an incorrect goto label, memory allocated for modedb and modelist in uvesafb_vbe_init() is not freed in some error paths. Fix this by updating the goto label.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

2.6.24 ≤ v < 5.10.2612.6.24 ≤ v < 5.15.2122.6.24 ≤ v < 6.1.1782.6.24 ≤ v < 6.12.972.6.24 ≤ v < 6.18.402.6.24 ≤ v < 6.6.1452.6.24 ≤ v < 7.1.52.6.24 ≤ v < 7.22.6.248bdb3a2d7df48b861972c4bfb58490853a228f51
Vendor states this is fixed in 033e56fed09047ee63072e9f58789f40c1c7079d (fixed)
Vendor states this is fixed in 12fe6a56506ed3bf0aaf6130a29102ce1fce62da (fixed)
Vendor states this is fixed in 61d46d6f5dc163aa5f3548633b5f392b021620ff (fixed)
Vendor states this is fixed in 81985921e14f5b471fc0ffe990826d0bda52c0cf (fixed)
Vendor states this is fixed in aa387a3e51808f580b51593e3c2f3d4703d91c1a (fixed)
Vendor states this is fixed in c53fdf7ee65af1b9b4566cc437d3754ce7b47118 (fixed)
Vendor states this is fixed in c606c28085a3106c91c6d37bbbbf97b451d572ce (fixed)
Vendor states this is fixed in f413512c79c2d0012c6ed486e4025e1489e6d443 (fixed)
Vendor states this is fixed in 2.6.24 (unaffected)
Vendor states this is fixed in 5.10.261 (unaffected)
Vendor states this is fixed in 5.15.212 (unaffected)
Vendor states this is fixed in 6.1.178 (unaffected)
Vendor states this is fixed in 6.12.97 (unaffected)
Vendor states this is fixed in 6.18.40 (unaffected)
Vendor states this is fixed in 6.6.145 (unaffected)
Vendor states this is fixed in 7.1.5 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card