CVE-2026-72270 - Vulnerability Details

- fbdev: s3fb: fix potential memory leak in s3_pci_probe()

Description

In the Linux kernel, the following vulnerability has been resolved:

fbdev: s3fb: fix potential memory leak in s3_pci_probe()

In s3_pci_probe(), the memory allocated for modelist using
fb_videomode_to_modelist() is not freed in subsequent error paths.
Fix that by calling fb_destroy_modelist()

Published: 2026-08-15

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`86c0f043a737dadf034a4e6f29aefb074f4a1146`	affected	< 37f4b8bd9e3835a7d4da26baf80b497e478d3123
`86c0f043a737dadf034a4e6f29aefb074f4a1146`	affected	< ef6c5e4607483259a0daf6584e9e34ef643a655d
`86c0f043a737dadf034a4e6f29aefb074f4a1146`	affected	< fc90ec978a3cef6f6d8c6074bee538998c7c9837
`86c0f043a737dadf034a4e6f29aefb074f4a1146`	affected	< 0d0fa8425b29657b3d3e5bb36f50a50e57c8101f
`86c0f043a737dadf034a4e6f29aefb074f4a1146`	affected	< 25b354f74b028a3f91b12e6b446256965744c477
`86c0f043a737dadf034a4e6f29aefb074f4a1146`	affected	< ad54698255a4b988cae1ad908c158c1d4128887c
`86c0f043a737dadf034a4e6f29aefb074f4a1146`	affected	< 56964e8039150a14462005458b25f19d6cad8f4a
`86c0f043a737dadf034a4e6f29aefb074f4a1146`	affected	< 3b0ed04bc852887a9164e1bbf521652e8ef3eb92

Linux

affected

Version	Status	Constraints
`3.0`	affected	—
`0`	unaffected	< 3.0
`5.10.261`	unaffected	≤ 5.10.*
`5.15.212`	unaffected	≤ 5.15.*
`6.1.178`	unaffected	≤ 6.1.*
`6.6.145`	unaffected	≤ 6.6.*
`6.12.97`	unaffected	≤ 6.12.*
`6.18.40`	unaffected	≤ 6.18.*
`7.1.5`	unaffected	≤ 7.1.*
`7.2`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[86c0f043a737dadf034a4e6f29aefb074f4a1146,37f4b8bd9e3835a7d4da26baf80b497e478d3123)`	affected	code_commit	—
`[86c0f043a737dadf034a4e6f29aefb074f4a1146,ef6c5e4607483259a0daf6584e9e34ef643a655d)`	affected	code_commit	—
`[86c0f043a737dadf034a4e6f29aefb074f4a1146,fc90ec978a3cef6f6d8c6074bee538998c7c9837)`	affected	code_commit	—
`[86c0f043a737dadf034a4e6f29aefb074f4a1146,0d0fa8425b29657b3d3e5bb36f50a50e57c8101f)`	affected	code_commit	—
`[86c0f043a737dadf034a4e6f29aefb074f4a1146,25b354f74b028a3f91b12e6b446256965744c477)`	affected	code_commit	—
`[86c0f043a737dadf034a4e6f29aefb074f4a1146,ad54698255a4b988cae1ad908c158c1d4128887c)`	affected	code_commit	—
`[86c0f043a737dadf034a4e6f29aefb074f4a1146,56964e8039150a14462005458b25f19d6cad8f4a)`	affected	code_commit	—
`[86c0f043a737dadf034a4e6f29aefb074f4a1146,3b0ed04bc852887a9164e1bbf521652e8ef3eb92)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`3.0`	affected	generic	—
`[0,3.0)`	unaffected	generic	—
`[5.10.261,5.11.0)`	unaffected	semver	—
`[5.15.212,5.16.0)`	unaffected	semver	—
`[6.1.178,6.2.0)`	unaffected	semver	—
`[6.6.145,6.7.0)`	unaffected	semver	—
`[6.12.97,6.13.0)`	unaffected	semver	—
`[6.18.40,6.19.0)`	unaffected	semver	—
`[7.1.5,7.2.0)`	unaffected	semver	—
`[7.2-rc1,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0021.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/0d0fa8425b29657b3d3e5bb36f50a50e57c8101f
https://git.kernel.org/stable/c/25b354f74b028a3f91b12e6b446256965744c477
https://git.kernel.org/stable/c/37f4b8bd9e3835a7d4da26baf80b497e478d3123
https://git.kernel.org/stable/c/3b0ed04bc852887a9164e1bbf521652e8ef3eb92
https://git.kernel.org/stable/c/56964e8039150a14462005458b25f19d6cad8f4a
https://git.kernel.org/stable/c/ad54698255a4b988cae1ad908c158c1d4128887c
https://git.kernel.org/stable/c/ef6c5e4607483259a0daf6584e9e34ef643a655d
https://git.kernel.org/stable/c/fc90ec978a3cef6f6d8c6074bee538998c7c9837
https://lore.kernel.org/linux-cve-announce/2026081556-CVE-2026-72270-bdbd@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-72270
https://www.cve.org/CVERecord?id=CVE-2026-72270

History

Wed, 19 Aug 2026 00:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-763
References		https://lore.kernel.org/linux-cve-announce/2026081556-CVE-2026-72270-bdbd@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-72270 https://www.cve.org/CVERecord?id=CVE-2026-72270
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Moderate`

Sat, 15 Aug 2026 10:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-401

Sat, 15 Aug 2026 06:00:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: fbdev: s3fb: fix potential memory leak in s3_pci_probe() In s3_pci_probe(), the memory allocated for modelist using fb_videomode_to_modelist() is not freed in subsequent error paths. Fix that by calling fb_destroy_modelist()
Title		fbdev: s3fb: fix potential memory leak in s3_pci_probe()
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/0d0fa8425b29657b3d3e5bb36f50a50e57c8101f https://git.kernel.org/stable/c/25b354f74b028a3f91b12e6b446256965744c477 https://git.kernel.org/stable/c/37f4b8bd9e3835a7d4da26baf80b497e478d3123 https://git.kernel.org/stable/c/3b0ed04bc852887a9164e1bbf521652e8ef3eb92 https://git.kernel.org/stable/c/56964e8039150a14462005458b25f19d6cad8f4a https://git.kernel.org/stable/c/ad54698255a4b988cae1ad908c158c1d4128887c https://git.kernel.org/stable/c/ef6c5e4607483259a0daf6584e9e34ef643a655d https://git.kernel.org/stable/c/fc90ec978a3cef6f6d8c6074bee538998c7c9837

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-15T05:54:54.589Z

Updated: 2026-08-17T05:11:30.077Z

Reserved: 2026-08-09T03:40:39.916Z

Link: CVE-2026-72270

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-15T06:21:55.873

Modified: 2026-08-17T06:18:29.497

Link: CVE-2026-72270

Redhat

Severity : Moderate

Publid Date: 2026-08-15T00:00:00Z

Links: CVE-2026-72270 - Bugzilla

OpenCVE Enrichment

Updated: 2026-08-15T20:15:02Z

Weaknesses

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object