CVE-2026-72272fbdev: radeon: fix potential memory leak in radeonfb_pci_register()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: fbdev: radeon: fix potential memory leak in radeonfb_pci_register() The function radeonfb_pci_register() allocates memory for modelist (by calling radeon_check_modes() which calls fb_add_videomode()). The memory is appended to info->modelist, but is not freed in subsequent error paths. Fix this by calling fb_destroy_modelist().
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before a94a4a0ec2684454934ba104988d6222836a572f; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 30a2ff955b66b16d4c98dc61f4fe8b3a57c6f7bb; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c622a3eed6ad26879b6c0bc208fd6e3ffc4b7de3; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before f4dacbfd885f34222e67145294de9b8479aa021d; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 builds before 1c5387451176db5def499db809d718765f359a37; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c2c795a320e7ef9aa69c7f4bd2c9ac07064eff9a; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 builds before 1b1b43342fbf11eaf2a8926b9ed4805579d772ac; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before df8c1101c9a08859da612b5d0a08d55d475522c6 | CNA record |
References
- https://git.kernel.org/stable/c/a94a4a0ec2684454934ba104988d6222836a572f
- https://git.kernel.org/stable/c/30a2ff955b66b16d4c98dc61f4fe8b3a57c6f7bb
- https://git.kernel.org/stable/c/c622a3eed6ad26879b6c0bc208fd6e3ffc4b7de3
- https://git.kernel.org/stable/c/f4dacbfd885f34222e67145294de9b8479aa021d
- https://git.kernel.org/stable/c/1c5387451176db5def499db809d718765f359a37
- https://git.kernel.org/stable/c/c2c795a320e7ef9aa69c7f4bd2c9ac07064eff9a
- https://git.kernel.org/stable/c/1b1b43342fbf11eaf2a8926b9ed4805579d772ac
- https://git.kernel.org/stable/c/df8c1101c9a08859da612b5d0a08d55d475522c6
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.