CVE-2026-72264
fbdev: tridentfb: fix potential memory leak in trident_pci_probe()
Non disponible
En bref
- Source
- NVD
- EPSS
- EPSS 0.22 % · centile 12 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: fbdev: tridentfb: fix potential memory leak in trident_pci_probe() In trident_pci_probe(), the memory allocated for modelist using fb_videomode_to_modelist() is not freed in subsequent error paths. Fix that by calling fb_destroy_modelist().
Références
- https://git.kernel.org/stable/c/868432039a3fd7c2c0d515e48f33d5e43391666c
- https://git.kernel.org/stable/c/089d149ccd7c3ac3d5e14ac65e558dcd9ec27583
- https://git.kernel.org/stable/c/de9cf16e39c0378716e9764fc0fbb6d4b45a1ee1
- https://git.kernel.org/stable/c/8d16e5bc78478176621cac0f4c381136d3c92c5f
- https://git.kernel.org/stable/c/5bdb6f11ad0398b11a3ae4d9104035f9dc628cdc
- https://git.kernel.org/stable/c/4ebe2c3a7db6332aab3655f8c552ca387c1dc199
- https://git.kernel.org/stable/c/2efd9797331a559b93ab888f451838f87bd6dfa3
- https://git.kernel.org/stable/c/7a35ec619d9af8ee128320975c1252b8ad65f1e8
Références européennes
- ENISA EUVD · EUVD-2026-59163
- GCVE · GCVE-0-2026-72264
Avis du CERT-FR
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1333 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1286 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 6a5e3bd0c8bc1025bb5092f54d5aea38216c665e < 868432039a3fd7c2c0d515e48f33d5e43391666c ; affected 6a5e3bd0c8bc1025bb5092f54d5aea38216c665e < 089d149ccd7c3ac3d5e14ac65e558dcd9ec27583 ; affected 6a5e3bd0c8bc1025bb5092f54d5aea38216c665e < de9cf16e39c0378716e9764fc0fbb6d4b45a1ee1 ; affected 6a5e3bd0c8bc1025bb5092f54d5aea38216c665e < 8d16e5bc78478176621cac0f4c381136d3c92c5f ; affected 6a5e3bd0c8bc1025bb5092f54d5aea38216c665e < 5bdb6f11ad0398b11a3ae4d9104035f9dc628cdc ; affected 6a5e3bd0c8bc1025bb5092f54d5aea38216c665e < 4ebe2c3a7db6332aab3655f8c552ca387c1dc199 |
| Linux · Linux | affected 4.4 ; unaffected 0 < 4.4 ; unaffected 5.10.261 ≤ 5.10.* ; unaffected 5.15.212 ≤ 5.15.* ; unaffected 6.1.178 ≤ 6.1.* ; unaffected 6.6.145 ≤ 6.6.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |