CVE-2026-72265

fbdev: nvidia: fix potential memory leak in nvidiafb_probe()

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Aug 17, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

fbdev: nvidia: fix potential memory leak in nvidiafb_probe()

In nvidiafb_probe(), the memory allocated for modelist in nvidia_set_fbinfo() is not freed in the subsequent error paths. Fix that by calling fb_destroy_modelist().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7e747f7b17ccce750502fd4d0b4e866fe4f066a6Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2515cd60f6b5ad680ed164aa6bd19b05270af34cAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 508704de34fb8c0dcbbf13397212363bbf0974deAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6ca48f23ce61a26349d7d084fb63b70499137c8eAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e8172773e5251f4df2eed74caab6ca3195fed1eaAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 009a8514745b16c468acc25aa00539abbf38e1b5Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ed3b3eb212441fb5f287dfd24ebafe11d634f009Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 85f5e38c162bdf9dbbe197275d416402712f3707Affected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7e747f7b17ccce750502fd4d0b4e866fe4f066a6Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2515cd60f6b5ad680ed164aa6bd19b05270af34cAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 508704de34fb8c0dcbbf13397212363bbf0974deAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6ca48f23ce61a26349d7d084fb63b70499137c8eAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e8172773e5251f4df2eed74caab6ca3195fed1eaAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 009a8514745b16c468acc25aa00539abbf38e1b5Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ed3b3eb212441fb5f287dfd24ebafe11d634f009Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 85f5e38c162bdf9dbbe197275d416402712f3707Affected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.