AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-72267

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's fbdev subsystem, specifically in the carminefb driver, where memory allocated for modelist is not properly freed during error handling in the fb_videomode_to_modelist() function. This oversight can lead to a potential memory leak, which may degrade system performance over time. System administrators and developers working with Linux kernel environments should prioritize this fix to ensure optimal resource management and system stability.

CVE
CVE-2026-72267
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() The memory allocated for modelist in fb_videomode_to_modelist() is not freed in the subsequent error path. Fix that by calling fb_destroy_modelist()