AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-72266

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

A memory leak vulnerability exists in the Linux kernel's vesafb_probe() function, where the option string returned by fb_get_options() is not properly freed. This can lead to increased memory consumption over time, potentially affecting system stability and performance. Linux system administrators and developers should prioritize addressing this issue to ensure optimal resource management in their environments.

CVE
CVE-2026-72266
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: fbdev: vesafb: fix memory leak in vesafb_probe() Since commit 73ce73c30ba9 ("fbdev: Transfer video= option strings to caller; clarify ownership") the string returned from fb_get_options() is expected to be freed by the caller. But the string is not freed in vesafb_probe(). Fix that by freeing the option string after setup.