CVE-2026-72272

fbdev: radeon: fix potential memory leak in radeonfb_pci_register()

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Aug 17, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

fbdev: radeon: fix potential memory leak in radeonfb_pci_register()

The function radeonfb_pci_register() allocates memory for modelist (by calling radeon_check_modes() which calls fb_add_videomode()). The memory is appended to info->modelist, but is not freed in subsequent error paths. Fix this by calling fb_destroy_modelist().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a94a4a0ec2684454934ba104988d6222836a572fAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 30a2ff955b66b16d4c98dc61f4fe8b3a57c6f7bbAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c622a3eed6ad26879b6c0bc208fd6e3ffc4b7de3Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f4dacbfd885f34222e67145294de9b8479aa021dAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1c5387451176db5def499db809d718765f359a37Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c2c795a320e7ef9aa69c7f4bd2c9ac07064eff9aAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1b1b43342fbf11eaf2a8926b9ed4805579d772acAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before df8c1101c9a08859da612b5d0a08d55d475522c6Affected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a94a4a0ec2684454934ba104988d6222836a572fAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 30a2ff955b66b16d4c98dc61f4fe8b3a57c6f7bbAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c622a3eed6ad26879b6c0bc208fd6e3ffc4b7de3Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f4dacbfd885f34222e67145294de9b8479aa021dAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1c5387451176db5def499db809d718765f359a37Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c2c795a320e7ef9aa69c7f4bd2c9ac07064eff9aAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1b1b43342fbf11eaf2a8926b9ed4805579d772acAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before df8c1101c9a08859da612b5d0a08d55d475522c6Affected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.