CVE-2026-72270

fbdev: s3fb: fix potential memory leak in s3_pci_probe()

N/A

Published: August 15, 2026 at 05:54 AM UTC

Updated: August 17, 2026 at 06:18 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: fbdev: s3fb: fix potential memory leak in s3_pci_probe() In s3_pci_probe(), the memory allocated for modelist using fb_videomode_to_modelist() is not freed in subsequent error paths. Fix that by calling fb_destroy_modelist()

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

3.0 ≤ v < 5.10.2613.0 ≤ v < 5.15.2123.0 ≤ v < 6.1.1783.0 ≤ v < 6.12.973.0 ≤ v < 6.18.403.0 ≤ v < 6.6.1453.0 ≤ v < 7.1.53.0 ≤ v < 7.23.086c0f043a737dadf034a4e6f29aefb074f4a1146

Vendor states this is fixed in 0d0fa8425b29657b3d3e5bb36f50a50e57c8101f (fixed)

Vendor states this is fixed in 25b354f74b028a3f91b12e6b446256965744c477 (fixed)

Vendor states this is fixed in 37f4b8bd9e3835a7d4da26baf80b497e478d3123 (fixed)

Vendor states this is fixed in 3b0ed04bc852887a9164e1bbf521652e8ef3eb92 (fixed)

Vendor states this is fixed in 56964e8039150a14462005458b25f19d6cad8f4a (fixed)

Vendor states this is fixed in ad54698255a4b988cae1ad908c158c1d4128887c (fixed)

Vendor states this is fixed in ef6c5e4607483259a0daf6584e9e34ef643a655d (fixed)

Vendor states this is fixed in fc90ec978a3cef6f6d8c6074bee538998c7c9837 (fixed)

Vendor states this is fixed in 3.0 (unaffected)

Vendor states this is fixed in 5.10.261 (unaffected)

Vendor states this is fixed in 5.15.212 (unaffected)

Vendor states this is fixed in 6.1.178 (unaffected)