CVE-2026-72264fbdev: tridentfb: fix potential memory leak in trident_pci_probe()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: fbdev: tridentfb: fix potential memory leak in trident_pci_probe() In trident_pci_probe(), the memory allocated for modelist using fb_videomode_to_modelist() is not freed in subsequent error paths. Fix that by calling fb_destroy_modelist().
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 6a5e3bd0c8bc1025bb5092f54d5aea38216c665e before 868432039a3fd7c2c0d515e48f33d5e43391666c; from 6a5e3bd0c8bc1025bb5092f54d5aea38216c665e before 089d149ccd7c3ac3d5e14ac65e558dcd9ec27583; from 6a5e3bd0c8bc1025bb5092f54d5aea38216c665e before de9cf16e39c0378716e9764fc0fbb6d4b45a1ee1; from 6a5e3bd0c8bc1025bb5092f54d5aea38216c665e before 8d16e5bc78478176621cac0f4c381136d3c92c5f; 6a5e3bd0c8bc1025bb5092f54d5aea38216c665e builds before 5bdb6f11ad0398b11a3ae4d9104035f9dc628cdc; 6a5e3bd0c8bc1025bb5092f54d5aea38216c665e builds before 4ebe2c3a7db6332aab3655f8c552ca387c1dc199; 6a5e3bd0c8bc1025bb5092f54d5aea38216c665e builds before 2efd9797331a559b93ab888f451838f87bd6dfa3; from 6a5e3bd0c8bc1025bb5092f54d5aea38216c665e before 7a35ec619d9af8ee128320975c1252b8ad65f1e8 | CNA record |
References
- https://git.kernel.org/stable/c/868432039a3fd7c2c0d515e48f33d5e43391666c
- https://git.kernel.org/stable/c/089d149ccd7c3ac3d5e14ac65e558dcd9ec27583
- https://git.kernel.org/stable/c/de9cf16e39c0378716e9764fc0fbb6d4b45a1ee1
- https://git.kernel.org/stable/c/8d16e5bc78478176621cac0f4c381136d3c92c5f
- https://git.kernel.org/stable/c/5bdb6f11ad0398b11a3ae4d9104035f9dc628cdc
- https://git.kernel.org/stable/c/4ebe2c3a7db6332aab3655f8c552ca387c1dc199
- https://git.kernel.org/stable/c/2efd9797331a559b93ab888f451838f87bd6dfa3
- https://git.kernel.org/stable/c/7a35ec619d9af8ee128320975c1252b8ad65f1e8
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.