CVE-2026-72267
In the Linux kernel, the following vulnerability has been resolved: fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() The memory allocated for modelist in fb_videomode_to_modelist() is not freed in the subsequent error path.
Does this matter?
Not yet scored. NVD analysis is pending; check back once CVSS and EPSS values are published.
Description
In the Linux kernel, the following vulnerability has been resolved: fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() The memory allocated for modelist in fb_videomode_to_modelist() is not freed in the subsequent error path. Fix that by calling fb_destroy_modelist()
- CVSS
- Not yet scored
- EPSS
- 0.22% probability · 12th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS 0.2% since 27 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- https://git.kernel.org/stable/c/6069044e74b7510bf2f034ccd049bc962fb9c765
- https://git.kernel.org/stable/c/6fcca16a2b19c37f60693c56cbc0c923364ff3ef
- https://git.kernel.org/stable/c/97b6c3f6e82a526d95dcfbfcf1c42ba44c61c3d6
- https://git.kernel.org/stable/c/b51990be8411335c263b51e9f4def1e84bfaa923
- https://git.kernel.org/stable/c/bcc43b2f7410eddb21f73e9a650499a6432c9383
- https://git.kernel.org/stable/c/d21e6747f3f68dcce59b5d2205f98633d28f69eb
- https://git.kernel.org/stable/c/d81860691e4cfa14d596136ea2727f244e9e5950
- https://git.kernel.org/stable/c/dae8f6ddc35cb1673dba32d2fd8f1f85cd377adf
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.