CVE-2026-72270fbdev: s3fb: fix potential memory leak in s3_pci_probe()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: fbdev: s3fb: fix potential memory leak in s3_pci_probe() In s3_pci_probe(), the memory allocated for modelist using fb_videomode_to_modelist() is not freed in subsequent error paths. Fix that by calling fb_destroy_modelist()
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 86c0f043a737dadf034a4e6f29aefb074f4a1146 builds before 37f4b8bd9e3835a7d4da26baf80b497e478d3123; from 86c0f043a737dadf034a4e6f29aefb074f4a1146 before ef6c5e4607483259a0daf6584e9e34ef643a655d; from 86c0f043a737dadf034a4e6f29aefb074f4a1146 before fc90ec978a3cef6f6d8c6074bee538998c7c9837; 86c0f043a737dadf034a4e6f29aefb074f4a1146 builds before 0d0fa8425b29657b3d3e5bb36f50a50e57c8101f; 86c0f043a737dadf034a4e6f29aefb074f4a1146 builds before 25b354f74b028a3f91b12e6b446256965744c477; from 86c0f043a737dadf034a4e6f29aefb074f4a1146 before ad54698255a4b988cae1ad908c158c1d4128887c; from 86c0f043a737dadf034a4e6f29aefb074f4a1146 before 56964e8039150a14462005458b25f19d6cad8f4a; 86c0f043a737dadf034a4e6f29aefb074f4a1146 builds before 3b0ed04bc852887a9164e1bbf521652e8ef3eb92 | CNA record |
References
- https://git.kernel.org/stable/c/37f4b8bd9e3835a7d4da26baf80b497e478d3123
- https://git.kernel.org/stable/c/ef6c5e4607483259a0daf6584e9e34ef643a655d
- https://git.kernel.org/stable/c/fc90ec978a3cef6f6d8c6074bee538998c7c9837
- https://git.kernel.org/stable/c/0d0fa8425b29657b3d3e5bb36f50a50e57c8101f
- https://git.kernel.org/stable/c/25b354f74b028a3f91b12e6b446256965744c477
- https://git.kernel.org/stable/c/ad54698255a4b988cae1ad908c158c1d4128887c
- https://git.kernel.org/stable/c/56964e8039150a14462005458b25f19d6cad8f4a
- https://git.kernel.org/stable/c/3b0ed04bc852887a9164e1bbf521652e8ef3eb92
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.