CVE-2026-72270: fbdev: s3fb: fix potential memory leak in s3_pci_probe()

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-15 · updated 2026-08-17

Description

In the Linux kernel, the following vulnerability has been resolved: fbdev: s3fb: fix potential memory leak in s3_pci_probe() In s3_pci_probe(), the memory allocated for modelist using fb_videomode_to_modelist() is not freed in subsequent error paths. Fix that by calling fb_destroy_modelist()

Affected products

Linux kernel: 3.0 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/0d0fa8425b29657b3d3e5bb36f50a50e57c8101f
https://git.kernel.org/stable/c/25b354f74b028a3f91b12e6b446256965744c477
https://git.kernel.org/stable/c/37f4b8bd9e3835a7d4da26baf80b497e478d3123
https://git.kernel.org/stable/c/3b0ed04bc852887a9164e1bbf521652e8ef3eb92
https://git.kernel.org/stable/c/56964e8039150a14462005458b25f19d6cad8f4a
https://git.kernel.org/stable/c/ad54698255a4b988cae1ad908c158c1d4128887c
https://git.kernel.org/stable/c/ef6c5e4607483259a0daf6584e9e34ef643a655d
https://git.kernel.org/stable/c/fc90ec978a3cef6f6d8c6074bee538998c7c9837

Get alerted when CVE-2026-72270 or the next vulnerability affects your stack