CVE-2026-72270: fbdev: s3fb: fix potential memory leak in s3_pci_probe()

Published Aug 15, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

fbdev: s3fb: fix potential memory leak in s3pciprobe()

In s3pciprobe(), the memory allocated for modelist using fbvideomodetomodelist() is not freed in subsequent error paths. Fix that by calling fbdestroymodelist()

Event History

Aug 15, 2026

CVE Published

via MITRE·05:54 AM

Data Sourced

via MITRE·05:54 AM

Description

Frequently Asked Questions

What is the severity of CVE-2026-72270?

CVE-2026-72270 has a severity rating of 10, indicating a critical level of risk.

How do I fix CVE-2026-72270?

To fix CVE-2026-72270, ensure that fb_destroy_modelist() is called to free allocated memory in s3_pci_probe() for error handling.

What does CVE-2026-72270 affect?

CVE-2026-72270 affects the Linux kernel specifically in the fbdev: s3fb module.

Is CVE-2026-72270 a remote or local vulnerability?

CVE-2026-72270 is considered a local vulnerability as it requires local access to the system.

When was CVE-2026-72270 published?

CVE-2026-72270 was published on August 15, 2026.

CVE-2026-72270: fbdev: s3fb: fix potential memory leak in s3_pci_probe()

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-72270?

How do I fix CVE-2026-72270?

What does CVE-2026-72270 affect?

Is CVE-2026-72270 a remote or local vulnerability?

When was CVE-2026-72270 published?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2026-72270?

How do I fix CVE-2026-72270?

What does CVE-2026-72270 affect?

Is CVE-2026-72270 a remote or local vulnerability?

When was CVE-2026-72270 published?