CVE-2026-72265fbdev: nvidia: fix potential memory leak in nvidiafb_probe()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: fbdev: nvidia: fix potential memory leak in nvidiafb_probe() In nvidiafb_probe(), the memory allocated for modelist in nvidia_set_fbinfo() is not freed in the subsequent error paths. Fix that by calling fb_destroy_modelist().
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 7e747f7b17ccce750502fd4d0b4e866fe4f066a6; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 2515cd60f6b5ad680ed164aa6bd19b05270af34c; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 508704de34fb8c0dcbbf13397212363bbf0974de; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 6ca48f23ce61a26349d7d084fb63b70499137c8e; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before e8172773e5251f4df2eed74caab6ca3195fed1ea; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 009a8514745b16c468acc25aa00539abbf38e1b5; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before ed3b3eb212441fb5f287dfd24ebafe11d634f009; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 85f5e38c162bdf9dbbe197275d416402712f3707 | CNA record |
References
- https://git.kernel.org/stable/c/7e747f7b17ccce750502fd4d0b4e866fe4f066a6
- https://git.kernel.org/stable/c/2515cd60f6b5ad680ed164aa6bd19b05270af34c
- https://git.kernel.org/stable/c/508704de34fb8c0dcbbf13397212363bbf0974de
- https://git.kernel.org/stable/c/6ca48f23ce61a26349d7d084fb63b70499137c8e
- https://git.kernel.org/stable/c/e8172773e5251f4df2eed74caab6ca3195fed1ea
- https://git.kernel.org/stable/c/009a8514745b16c468acc25aa00539abbf38e1b5
- https://git.kernel.org/stable/c/ed3b3eb212441fb5f287dfd24ebafe11d634f009
- https://git.kernel.org/stable/c/85f5e38c162bdf9dbbe197275d416402712f3707
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.