Riskcovery

CVE-2026-72266

fbdev: vesafb: fix memory leak in vesafb_probe()

State
Published
Severity
Not scored
Published
Aug 15, 2026
Updated
Aug 17, 2026
Reserved
Aug 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

fbdev: vesafb: fix memory leak in vesafb_probe()

Since commit 73ce73c30ba9 ("fbdev: Transfer video= option strings to caller; clarify ownership") the string returned from fb_get_options() is expected to be freed by the caller. But the string is not freed in vesafb_probe(). Fix that by freeing the option string after setup.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 to before 124df55c7201d011a3fead2205685b6c47eae093Affected
  • 73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 to before 43af398217ca8940bf30643fd1150b4c655b8a88Affected
  • 73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 to before 58bc18e03481b62f0ec53fe47f36615d52660a7dAffected
  • 73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 to before 7b96ce9f8e47538c3c6eebbb217c94d696975cacAffected
  • 73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 to before b15d708995c01bbffe7dcd634a31959f6805bed3Affected
LinuxLinux
  • 6.4Affected
  • before 6.4Not affected
  • 6.6.145 through 6.6.*Not affected
  • 6.12.97 through 6.12.*Not affected
  • 6.18.40 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.