Not yet scoredPublished Aug 15, 2026

CVE-2026-72272fbdev: radeon: fix potential memory leak in radeonfb_pci_register()

Updated under an hour ago (Oct 27, 2026, 5:40 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: fbdev: radeon: fix potential memory leak in radeonfb_pci_register() The function radeonfb_pci_register() allocates memory for modelist (by calling radeon_check_modes() which calls fb_add_videomode()). The memory is appended to info->modelist, but is not freed in subsequent error paths. Fix this by calling fb_destroy_modelist().

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Aug 17, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before a94a4a0ec2684454934ba104988d6222836a572f; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 30a2ff955b66b16d4c98dc61f4fe8b3a57c6f7bb; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c622a3eed6ad26879b6c0bc208fd6e3ffc4b7de3; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before f4dacbfd885f34222e67145294de9b8479aa021d; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 builds before 1c5387451176db5def499db809d718765f359a37; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c2c795a320e7ef9aa69c7f4bd2c9ac07064eff9a; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 builds before 1b1b43342fbf11eaf2a8926b9ed4805579d772ac; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before df8c1101c9a08859da612b5d0a08d55d475522c6	CNA record

References

References

https://git.kernel.org/stable/c/a94a4a0ec2684454934ba104988d6222836a572f
https://git.kernel.org/stable/c/30a2ff955b66b16d4c98dc61f4fe8b3a57c6f7bb
https://git.kernel.org/stable/c/c622a3eed6ad26879b6c0bc208fd6e3ffc4b7de3
https://git.kernel.org/stable/c/f4dacbfd885f34222e67145294de9b8479aa021d
https://git.kernel.org/stable/c/1c5387451176db5def499db809d718765f359a37
https://git.kernel.org/stable/c/c2c795a320e7ef9aa69c7f4bd2c9ac07064eff9a
https://git.kernel.org/stable/c/1b1b43342fbf11eaf2a8926b9ed4805579d772ac
https://git.kernel.org/stable/c/df8c1101c9a08859da612b5d0a08d55d475522c6

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.