CVE-2026-72268: fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe()
In the Linux kernel, the following vulnerability has been resolved:
fbdev: tdfxfb: fix potential memory leak in tdfxfbprobe()
In tdfxfbprobe(), the memory allocated for modelist using fbvideomodetomodelist() when CONFIGFB3DFXI2C is defined, is not freed in the subsequent error paths. Fix that by calling fbdestroymodelist().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Apply the kernel fix for fbdev: tdfxfb to ensure memory allocated for modelist in tdfxfb_probe() is freed on subsequent error paths by calling fb_destroy_modelist().
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72268?
CVE-2026-72268 has a severity rating of 8, indicating it is a high-risk vulnerability.
How does CVE-2026-72268 affect systems?
CVE-2026-72268 can lead to a potential memory leak in the Linux kernel due to improper memory management in the tdfxfb_probe() function.
How do I fix CVE-2026-72268?
To fix CVE-2026-72268, ensure that the Linux kernel is updated to a version that includes the patch for the memory leak in tdfxfb_probe().
What systems are impacted by CVE-2026-72268?
CVE-2026-72268 affects systems using the Linux kernel with CONFIG_FB_3DFX_I2C enabled.
When was CVE-2026-72268 published?
CVE-2026-72268 was published on August 15, 2026.