CVE-2026-72269

fbdev: uvesafb: fix potential memory leak in uvesafb_probe()

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Aug 17, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

fbdev: uvesafb: fix potential memory leak in uvesafb_probe()

Due to an incorrect goto label, memory allocated for modedb and modelist in uvesafb_vbe_init() is not freed in some error paths. Fix this by updating the goto label.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8bdb3a2d7df48b861972c4bfb58490853a228f51 to before f413512c79c2d0012c6ed486e4025e1489e6d443Affected 8bdb3a2d7df48b861972c4bfb58490853a228f51 to before 61d46d6f5dc163aa5f3548633b5f392b021620ffAffected 8bdb3a2d7df48b861972c4bfb58490853a228f51 to before 81985921e14f5b471fc0ffe990826d0bda52c0cfAffected 8bdb3a2d7df48b861972c4bfb58490853a228f51 to before c53fdf7ee65af1b9b4566cc437d3754ce7b47118Affected 8bdb3a2d7df48b861972c4bfb58490853a228f51 to before c606c28085a3106c91c6d37bbbbf97b451d572ceAffected 8bdb3a2d7df48b861972c4bfb58490853a228f51 to before 12fe6a56506ed3bf0aaf6130a29102ce1fce62daAffected 8bdb3a2d7df48b861972c4bfb58490853a228f51 to before aa387a3e51808f580b51593e3c2f3d4703d91c1aAffected 8bdb3a2d7df48b861972c4bfb58490853a228f51 to before 033e56fed09047ee63072e9f58789f40c1c7079dAffected
LinuxLinux	2.6.24Affected before 2.6.24Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

8bdb3a2d7df48b861972c4bfb58490853a228f51 to before f413512c79c2d0012c6ed486e4025e1489e6d443Affected
8bdb3a2d7df48b861972c4bfb58490853a228f51 to before 61d46d6f5dc163aa5f3548633b5f392b021620ffAffected
8bdb3a2d7df48b861972c4bfb58490853a228f51 to before 81985921e14f5b471fc0ffe990826d0bda52c0cfAffected
8bdb3a2d7df48b861972c4bfb58490853a228f51 to before c53fdf7ee65af1b9b4566cc437d3754ce7b47118Affected
8bdb3a2d7df48b861972c4bfb58490853a228f51 to before c606c28085a3106c91c6d37bbbbf97b451d572ceAffected
8bdb3a2d7df48b861972c4bfb58490853a228f51 to before 12fe6a56506ed3bf0aaf6130a29102ce1fce62daAffected
8bdb3a2d7df48b861972c4bfb58490853a228f51 to before aa387a3e51808f580b51593e3c2f3d4703d91c1aAffected
8bdb3a2d7df48b861972c4bfb58490853a228f51 to before 033e56fed09047ee63072e9f58789f40c1c7079dAffected

LinuxLinux

2.6.24Affected
before 2.6.24Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.