CVE-2026-72264: fbdev: tridentfb: fix potential memory leak in trident_pci_probe()

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-15 · updated 2026-08-17

Description

In the Linux kernel, the following vulnerability has been resolved: fbdev: tridentfb: fix potential memory leak in trident_pci_probe() In trident_pci_probe(), the memory allocated for modelist using fb_videomode_to_modelist() is not freed in subsequent error paths. Fix that by calling fb_destroy_modelist().

Affected products

Linux kernel: 4.4 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/089d149ccd7c3ac3d5e14ac65e558dcd9ec27583
https://git.kernel.org/stable/c/2efd9797331a559b93ab888f451838f87bd6dfa3
https://git.kernel.org/stable/c/4ebe2c3a7db6332aab3655f8c552ca387c1dc199
https://git.kernel.org/stable/c/5bdb6f11ad0398b11a3ae4d9104035f9dc628cdc
https://git.kernel.org/stable/c/7a35ec619d9af8ee128320975c1252b8ad65f1e8
https://git.kernel.org/stable/c/868432039a3fd7c2c0d515e48f33d5e43391666c
https://git.kernel.org/stable/c/8d16e5bc78478176621cac0f4c381136d3c92c5f
https://git.kernel.org/stable/c/de9cf16e39c0378716e9764fc0fbb6d4b45a1ee1

Get alerted when CVE-2026-72264 or the next vulnerability affects your stack