CVE-2026-72267: fbdev: carminefb: fix potential memory leak in alloc_carmine_fb()

Published Aug 15, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

fbdev: carminefb: fix potential memory leak in alloccarminefb()

The memory allocated for modelist in fbvideomodetomodelist() is not freed in the subsequent error path. Fix that by calling fbdestroymodelist()

Event History

Aug 15, 2026

CVE Published

via MITRE·05:54 AM

Data Sourced

via MITRE·05:54 AM

Description

CVE-2026-72267 has a severity rating of 10, indicating a critical vulnerability.

To address CVE-2026-72267, ensure that the kernel is updated to the latest version where the memory leak has been resolved.

CVE-2026-72267 affects the fbdev subsystem in the Linux kernel specifically related to the carminefb driver.

CVE-2026-72267 is categorized as a memory leak vulnerability that can lead to resource exhaustion.

If exploited, CVE-2026-72267 can cause a memory leak that may degrade system performance over time due to excessive memory usage.