CVE-2026-72270

fbdev: s3fb: fix potential memory leak in s3_pci_probe()

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Aug 17, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

fbdev: s3fb: fix potential memory leak in s3_pci_probe()

In s3_pci_probe(), the memory allocated for modelist using fb_videomode_to_modelist() is not freed in subsequent error paths. Fix that by calling fb_destroy_modelist()

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	86c0f043a737dadf034a4e6f29aefb074f4a1146 to before 37f4b8bd9e3835a7d4da26baf80b497e478d3123Affected 86c0f043a737dadf034a4e6f29aefb074f4a1146 to before ef6c5e4607483259a0daf6584e9e34ef643a655dAffected 86c0f043a737dadf034a4e6f29aefb074f4a1146 to before fc90ec978a3cef6f6d8c6074bee538998c7c9837Affected 86c0f043a737dadf034a4e6f29aefb074f4a1146 to before 0d0fa8425b29657b3d3e5bb36f50a50e57c8101fAffected 86c0f043a737dadf034a4e6f29aefb074f4a1146 to before 25b354f74b028a3f91b12e6b446256965744c477Affected 86c0f043a737dadf034a4e6f29aefb074f4a1146 to before ad54698255a4b988cae1ad908c158c1d4128887cAffected 86c0f043a737dadf034a4e6f29aefb074f4a1146 to before 56964e8039150a14462005458b25f19d6cad8f4aAffected 86c0f043a737dadf034a4e6f29aefb074f4a1146 to before 3b0ed04bc852887a9164e1bbf521652e8ef3eb92Affected
LinuxLinux	3.0Affected before 3.0Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

86c0f043a737dadf034a4e6f29aefb074f4a1146 to before 37f4b8bd9e3835a7d4da26baf80b497e478d3123Affected
86c0f043a737dadf034a4e6f29aefb074f4a1146 to before ef6c5e4607483259a0daf6584e9e34ef643a655dAffected
86c0f043a737dadf034a4e6f29aefb074f4a1146 to before fc90ec978a3cef6f6d8c6074bee538998c7c9837Affected
86c0f043a737dadf034a4e6f29aefb074f4a1146 to before 0d0fa8425b29657b3d3e5bb36f50a50e57c8101fAffected
86c0f043a737dadf034a4e6f29aefb074f4a1146 to before 25b354f74b028a3f91b12e6b446256965744c477Affected
86c0f043a737dadf034a4e6f29aefb074f4a1146 to before ad54698255a4b988cae1ad908c158c1d4128887cAffected
86c0f043a737dadf034a4e6f29aefb074f4a1146 to before 56964e8039150a14462005458b25f19d6cad8f4aAffected
86c0f043a737dadf034a4e6f29aefb074f4a1146 to before 3b0ed04bc852887a9164e1bbf521652e8ef3eb92Affected

LinuxLinux

3.0Affected
before 3.0Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.