CVE-2026-72269 - Vulnerability Details

- fbdev: uvesafb: fix potential memory leak in uvesafb_probe()

Description

In the Linux kernel, the following vulnerability has been resolved:

fbdev: uvesafb: fix potential memory leak in uvesafb_probe()

Due to an incorrect goto label, memory allocated for modedb and modelist
in uvesafb_vbe_init() is not freed in some error paths. Fix this by
updating the goto label.

Published: 2026-08-15

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`8bdb3a2d7df48b861972c4bfb58490853a228f51`	affected	< f413512c79c2d0012c6ed486e4025e1489e6d443
`8bdb3a2d7df48b861972c4bfb58490853a228f51`	affected	< 61d46d6f5dc163aa5f3548633b5f392b021620ff
`8bdb3a2d7df48b861972c4bfb58490853a228f51`	affected	< 81985921e14f5b471fc0ffe990826d0bda52c0cf
`8bdb3a2d7df48b861972c4bfb58490853a228f51`	affected	< c53fdf7ee65af1b9b4566cc437d3754ce7b47118
`8bdb3a2d7df48b861972c4bfb58490853a228f51`	affected	< c606c28085a3106c91c6d37bbbbf97b451d572ce
`8bdb3a2d7df48b861972c4bfb58490853a228f51`	affected	< 12fe6a56506ed3bf0aaf6130a29102ce1fce62da
`8bdb3a2d7df48b861972c4bfb58490853a228f51`	affected	< aa387a3e51808f580b51593e3c2f3d4703d91c1a
`8bdb3a2d7df48b861972c4bfb58490853a228f51`	affected	< 033e56fed09047ee63072e9f58789f40c1c7079d

Linux

affected

Version	Status	Constraints
`2.6.24`	affected	—
`0`	unaffected	< 2.6.24
`5.10.261`	unaffected	≤ 5.10.*
`5.15.212`	unaffected	≤ 5.15.*
`6.1.178`	unaffected	≤ 6.1.*
`6.6.145`	unaffected	≤ 6.6.*
`6.12.97`	unaffected	≤ 6.12.*
`6.18.40`	unaffected	≤ 6.18.*
`7.1.5`	unaffected	≤ 7.1.*
`7.2`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[8bdb3a2d7df48b861972c4bfb58490853a228f51,f413512c79c2d0012c6ed486e4025e1489e6d443)`	affected	code_commit	—
`[8bdb3a2d7df48b861972c4bfb58490853a228f51,61d46d6f5dc163aa5f3548633b5f392b021620ff)`	affected	code_commit	—
`[8bdb3a2d7df48b861972c4bfb58490853a228f51,81985921e14f5b471fc0ffe990826d0bda52c0cf)`	affected	code_commit	—
`[8bdb3a2d7df48b861972c4bfb58490853a228f51,c53fdf7ee65af1b9b4566cc437d3754ce7b47118)`	affected	code_commit	—
`[8bdb3a2d7df48b861972c4bfb58490853a228f51,c606c28085a3106c91c6d37bbbbf97b451d572ce)`	affected	code_commit	—
`[8bdb3a2d7df48b861972c4bfb58490853a228f51,12fe6a56506ed3bf0aaf6130a29102ce1fce62da)`	affected	code_commit	—
`[8bdb3a2d7df48b861972c4bfb58490853a228f51,aa387a3e51808f580b51593e3c2f3d4703d91c1a)`	affected	code_commit	—
`[8bdb3a2d7df48b861972c4bfb58490853a228f51,033e56fed09047ee63072e9f58789f40c1c7079d)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`2.6.24`	affected	semver	—
`[0,2.6.24)`	unaffected	semver	—
`[5.10.261,5.11.0)`	unaffected	semver	—
`[5.15.212,5.16.0)`	unaffected	semver	—
`[6.1.178,6.2.0)`	unaffected	semver	—
`[6.6.145,6.7.0)`	unaffected	semver	—
`[6.12.97,6.13.0)`	unaffected	semver	—
`[6.18.40,6.19.0)`	unaffected	semver	—
`[7.1.5,7.2.0)`	unaffected	semver	—
`[7.2-rc1,*]`	unaffected	semver	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0021.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/033e56fed09047ee63072e9f58789f40c1c7079d
https://git.kernel.org/stable/c/12fe6a56506ed3bf0aaf6130a29102ce1fce62da
https://git.kernel.org/stable/c/61d46d6f5dc163aa5f3548633b5f392b021620ff
https://git.kernel.org/stable/c/81985921e14f5b471fc0ffe990826d0bda52c0cf
https://git.kernel.org/stable/c/aa387a3e51808f580b51593e3c2f3d4703d91c1a
https://git.kernel.org/stable/c/c53fdf7ee65af1b9b4566cc437d3754ce7b47118
https://git.kernel.org/stable/c/c606c28085a3106c91c6d37bbbbf97b451d572ce
https://git.kernel.org/stable/c/f413512c79c2d0012c6ed486e4025e1489e6d443
https://lore.kernel.org/linux-cve-announce/2026081556-CVE-2026-72269-5337@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-72269
https://www.cve.org/CVERecord?id=CVE-2026-72269

History

Tue, 18 Aug 2026 15:15:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-401

Tue, 18 Aug 2026 12:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-772
References		https://lore.kernel.org/linux-cve-announce/2026081556-CVE-2026-72269-5337@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-72269 https://www.cve.org/CVERecord?id=CVE-2026-72269
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Moderate`

Sat, 15 Aug 2026 20:45:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-401

Sat, 15 Aug 2026 06:00:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: fbdev: uvesafb: fix potential memory leak in uvesafb_probe() Due to an incorrect goto label, memory allocated for modedb and modelist in uvesafb_vbe_init() is not freed in some error paths. Fix this by updating the goto label.
Title		fbdev: uvesafb: fix potential memory leak in uvesafb_probe()
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/033e56fed09047ee63072e9f58789f40c1c7079d https://git.kernel.org/stable/c/12fe6a56506ed3bf0aaf6130a29102ce1fce62da https://git.kernel.org/stable/c/61d46d6f5dc163aa5f3548633b5f392b021620ff https://git.kernel.org/stable/c/81985921e14f5b471fc0ffe990826d0bda52c0cf https://git.kernel.org/stable/c/aa387a3e51808f580b51593e3c2f3d4703d91c1a https://git.kernel.org/stable/c/c53fdf7ee65af1b9b4566cc437d3754ce7b47118 https://git.kernel.org/stable/c/c606c28085a3106c91c6d37bbbbf97b451d572ce https://git.kernel.org/stable/c/f413512c79c2d0012c6ed486e4025e1489e6d443

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-15T05:54:53.973Z

Updated: 2026-08-17T05:11:28.961Z

Reserved: 2026-08-09T03:40:39.916Z

Link: CVE-2026-72269

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-15T06:21:55.643

Modified: 2026-08-17T06:18:29.377

Link: CVE-2026-72269

Redhat

Severity : Moderate

Publid Date: 2026-08-15T00:00:00Z

Links: CVE-2026-72269 - Bugzilla

OpenCVE Enrichment

Updated: 2026-08-18T20:30:17Z

Weaknesses

CWE-772

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object