What’s Vulnerable › Vulnerabilities

CVE-2026-72269: fbdev: uvesafb: fix potential memory leak in uvesafb_probe()

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-15 · updated 2026-08-17

Description

In the Linux kernel, the following vulnerability has been resolved: fbdev: uvesafb: fix potential memory leak in uvesafb_probe() Due to an incorrect goto label, memory allocated for modedb and modelist in uvesafb_vbe_init() is not freed in some error paths. Fix this by updating the goto label.

Affected products

• Linux kernel: 2.6.24 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/033e56fed09047ee63072e9f58789f40c1c7079d
• https://git.kernel.org/stable/c/12fe6a56506ed3bf0aaf6130a29102ce1fce62da
• https://git.kernel.org/stable/c/61d46d6f5dc163aa5f3548633b5f392b021620ff
• https://git.kernel.org/stable/c/81985921e14f5b471fc0ffe990826d0bda52c0cf
• https://git.kernel.org/stable/c/aa387a3e51808f580b51593e3c2f3d4703d91c1a
• https://git.kernel.org/stable/c/c53fdf7ee65af1b9b4566cc437d3754ce7b47118
• https://git.kernel.org/stable/c/c606c28085a3106c91c6d37bbbbf97b451d572ce
• https://git.kernel.org/stable/c/f413512c79c2d0012c6ed486e4025e1489e6d443

Get alerted when CVE-2026-72269 or the next vulnerability affects your stack