CVE-2026-72269fbdev: uvesafb: fix potential memory leak in uvesafb_probe()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: fbdev: uvesafb: fix potential memory leak in uvesafb_probe() Due to an incorrect goto label, memory allocated for modedb and modelist in uvesafb_vbe_init() is not freed in some error paths. Fix this by updating the goto label.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 8bdb3a2d7df48b861972c4bfb58490853a228f51 before f413512c79c2d0012c6ed486e4025e1489e6d443; from 8bdb3a2d7df48b861972c4bfb58490853a228f51 before 61d46d6f5dc163aa5f3548633b5f392b021620ff; from 8bdb3a2d7df48b861972c4bfb58490853a228f51 before 81985921e14f5b471fc0ffe990826d0bda52c0cf; from 8bdb3a2d7df48b861972c4bfb58490853a228f51 before c53fdf7ee65af1b9b4566cc437d3754ce7b47118; from 8bdb3a2d7df48b861972c4bfb58490853a228f51 before c606c28085a3106c91c6d37bbbbf97b451d572ce; from 8bdb3a2d7df48b861972c4bfb58490853a228f51 before 12fe6a56506ed3bf0aaf6130a29102ce1fce62da; from 8bdb3a2d7df48b861972c4bfb58490853a228f51 before aa387a3e51808f580b51593e3c2f3d4703d91c1a; from 8bdb3a2d7df48b861972c4bfb58490853a228f51 before 033e56fed09047ee63072e9f58789f40c1c7079d | CNA record |
References
- https://git.kernel.org/stable/c/f413512c79c2d0012c6ed486e4025e1489e6d443
- https://git.kernel.org/stable/c/61d46d6f5dc163aa5f3548633b5f392b021620ff
- https://git.kernel.org/stable/c/81985921e14f5b471fc0ffe990826d0bda52c0cf
- https://git.kernel.org/stable/c/c53fdf7ee65af1b9b4566cc437d3754ce7b47118
- https://git.kernel.org/stable/c/c606c28085a3106c91c6d37bbbbf97b451d572ce
- https://git.kernel.org/stable/c/12fe6a56506ed3bf0aaf6130a29102ce1fce62da
- https://git.kernel.org/stable/c/aa387a3e51808f580b51593e3c2f3d4703d91c1a
- https://git.kernel.org/stable/c/033e56fed09047ee63072e9f58789f40c1c7079d
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.