CVE-2026-72271 - Vulnerability Details

- fbdev: i740fb: fix potential memory leak in i740fb_probe()

Description

In the Linux kernel, the following vulnerability has been resolved:

fbdev: i740fb: fix potential memory leak in i740fb_probe()

In i740fb_probe(), the memory allocated in fb_videomode_to_modelist()
for modelist is not freed in the error paths. Fix that by calling
fb_destroy_modelist().

Published: 2026-08-15

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`5350c65f4f15bbc111ffa629130d3f32cdd4ccf6`	affected	< d3776b1bf9c100873c7365bd31a67ed6caacbd82
`5350c65f4f15bbc111ffa629130d3f32cdd4ccf6`	affected	< ccf073cd4a2f783adc40b04db3805dbddaaf9f31
`5350c65f4f15bbc111ffa629130d3f32cdd4ccf6`	affected	< aebdbe61b3960cd22b8bb6e70e3d94fb3bbb202c
`5350c65f4f15bbc111ffa629130d3f32cdd4ccf6`	affected	< e1ecbaeec5fbf0b0e2d5810ec574f762d148771e
`5350c65f4f15bbc111ffa629130d3f32cdd4ccf6`	affected	< 3c0cf89b74e7b8ebc21a1542937c8e912d19f22b
`5350c65f4f15bbc111ffa629130d3f32cdd4ccf6`	affected	< 146b708bc75f1e6cf70df31195632c9946cb70fd
`5350c65f4f15bbc111ffa629130d3f32cdd4ccf6`	affected	< 2ede8fa708235c81ab18de14077f1a458bec7e22
`5350c65f4f15bbc111ffa629130d3f32cdd4ccf6`	affected	< 5936063409af230a2c88b8700c47b89a19fd70b5

Linux

affected

Version	Status	Constraints
`3.4`	affected	—
`0`	unaffected	< 3.4
`5.10.261`	unaffected	≤ 5.10.*
`5.15.212`	unaffected	≤ 5.15.*
`6.1.178`	unaffected	≤ 6.1.*
`6.6.145`	unaffected	≤ 6.6.*
`6.12.97`	unaffected	≤ 6.12.*
`6.18.40`	unaffected	≤ 6.18.*
`7.1.5`	unaffected	≤ 7.1.*
`7.2`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[5350c65f4f15bbc111ffa629130d3f32cdd4ccf6,d3776b1bf9c100873c7365bd31a67ed6caacbd82)`	affected	code_commit	—
`[5350c65f4f15bbc111ffa629130d3f32cdd4ccf6,ccf073cd4a2f783adc40b04db3805dbddaaf9f31)`	affected	code_commit	—
`[5350c65f4f15bbc111ffa629130d3f32cdd4ccf6,aebdbe61b3960cd22b8bb6e70e3d94fb3bbb202c)`	affected	code_commit	—
`[5350c65f4f15bbc111ffa629130d3f32cdd4ccf6,e1ecbaeec5fbf0b0e2d5810ec574f762d148771e)`	affected	code_commit	—
`[5350c65f4f15bbc111ffa629130d3f32cdd4ccf6,3c0cf89b74e7b8ebc21a1542937c8e912d19f22b)`	affected	code_commit	—
`[5350c65f4f15bbc111ffa629130d3f32cdd4ccf6,146b708bc75f1e6cf70df31195632c9946cb70fd)`	affected	code_commit	—
`[5350c65f4f15bbc111ffa629130d3f32cdd4ccf6,2ede8fa708235c81ab18de14077f1a458bec7e22)`	affected	code_commit	—
`[5350c65f4f15bbc111ffa629130d3f32cdd4ccf6,5936063409af230a2c88b8700c47b89a19fd70b5)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`3.4`	affected	generic	—
`[0,3.4)`	unaffected	semver	—
`[5.10.261,5.11.0)`	unaffected	semver	—
`[5.15.212,5.16.0)`	unaffected	semver	—
`[6.1.178,6.2.0)`	unaffected	semver	—
`[6.6.145,6.7.0)`	unaffected	semver	—
`[6.12.97,6.13.0)`	unaffected	semver	—
`[6.18.40,6.19.0)`	unaffected	semver	—
`[7.1.5,7.2.0)`	unaffected	semver	—
`[7.2-rc1,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
Ubuntu USN	USN-8876-1	Linux kernel (Azure CVM) vulnerabilities
Ubuntu USN	USN-8875-1	Linux kernel vulnerabilities
Ubuntu USN	USN-8877-1	Linux kernel (GCP) vulnerabilities
Ubuntu USN	USN-8878-1	Linux kernel (GCP) vulnerabilities
Ubuntu USN	USN-8879-1	Linux kernel (Oracle) vulnerabilities
Ubuntu USN	USN-8887-1	Linux kernel vulnerabilities
Ubuntu USN	USN-8888-1	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-8889-1	Linux kernel (OEM) vulnerabilities

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0022.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/146b708bc75f1e6cf70df31195632c9946cb70fd
https://git.kernel.org/stable/c/2ede8fa708235c81ab18de14077f1a458bec7e22
https://git.kernel.org/stable/c/3c0cf89b74e7b8ebc21a1542937c8e912d19f22b
https://git.kernel.org/stable/c/5936063409af230a2c88b8700c47b89a19fd70b5
https://git.kernel.org/stable/c/aebdbe61b3960cd22b8bb6e70e3d94fb3bbb202c
https://git.kernel.org/stable/c/ccf073cd4a2f783adc40b04db3805dbddaaf9f31
https://git.kernel.org/stable/c/d3776b1bf9c100873c7365bd31a67ed6caacbd82
https://git.kernel.org/stable/c/e1ecbaeec5fbf0b0e2d5810ec574f762d148771e
https://lore.kernel.org/linux-cve-announce/2026081557-CVE-2026-72271-b9c1@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-72271
https://www.cve.org/CVERecord?id=CVE-2026-72271

History

Tue, 18 Aug 2026 23:00:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-401

Tue, 18 Aug 2026 12:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-772
References		https://lore.kernel.org/linux-cve-announce/2026081557-CVE-2026-72271-b9c1@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-72271 https://www.cve.org/CVERecord?id=CVE-2026-72271
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Moderate`

Sat, 15 Aug 2026 10:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-401

Sat, 15 Aug 2026 06:00:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: fbdev: i740fb: fix potential memory leak in i740fb_probe() In i740fb_probe(), the memory allocated in fb_videomode_to_modelist() for modelist is not freed in the error paths. Fix that by calling fb_destroy_modelist().
Title		fbdev: i740fb: fix potential memory leak in i740fb_probe()
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/146b708bc75f1e6cf70df31195632c9946cb70fd https://git.kernel.org/stable/c/2ede8fa708235c81ab18de14077f1a458bec7e22 https://git.kernel.org/stable/c/3c0cf89b74e7b8ebc21a1542937c8e912d19f22b https://git.kernel.org/stable/c/5936063409af230a2c88b8700c47b89a19fd70b5 https://git.kernel.org/stable/c/aebdbe61b3960cd22b8bb6e70e3d94fb3bbb202c https://git.kernel.org/stable/c/ccf073cd4a2f783adc40b04db3805dbddaaf9f31 https://git.kernel.org/stable/c/d3776b1bf9c100873c7365bd31a67ed6caacbd82 https://git.kernel.org/stable/c/e1ecbaeec5fbf0b0e2d5810ec574f762d148771e

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-15T05:54:55.203Z

Updated: 2026-08-17T05:11:31.179Z

Reserved: 2026-08-09T03:40:39.916Z

Link: CVE-2026-72271

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-15T06:21:56.093

Modified: 2026-08-17T06:18:29.610

Link: CVE-2026-72271

Redhat

Severity : Moderate

Publid Date: 2026-08-15T00:00:00Z

Links: CVE-2026-72271 - Bugzilla

OpenCVE Enrichment

Updated: 2026-08-22T08:45:03Z

Weaknesses

CWE-772

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object