vt8500lcdfb Missing DMA Buffer Free in Linux Kernel

Publication date: 2026-05-06

Last updated on: 2026-05-11

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: fbdev: vt8500lcdfb: fix missing dma_free_coherent() fbi->fb.screen_buffer is allocated with dma_alloc_coherent() but is not freed if the error path is reached.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-06

Last Modified

2026-05-11

Generated

2026-07-06

AI Q&A

2026-05-06

EPSS Evaluated

2026-07-05

NVD

CVE-2026-43202

EUVD

EUVD-2026-27765

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.2 (inc) to 6.6.128 (exc)
linux	linux_kernel	From 6.7 (inc) to 6.12.75 (exc)
linux	linux_kernel	From 6.13 (inc) to 6.18.16 (exc)
linux	linux_kernel	From 6.19 (inc) to 6.19.6 (exc)
linux	linux_kernel	From 5.11 (inc) to 5.15.202 (exc)
linux	linux_kernel	From 5.16 (inc) to 6.1.165 (exc)
linux	linux_kernel	From 3.7 (inc) to 5.10.252 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's fbdev vt8500lcdfb driver. Specifically, the screen buffer (fbi->fb.screen_buffer) is allocated using dma_alloc_coherent(), but if an error occurs, the allocated memory is not freed properly because dma_free_coherent() is missing in the error handling path.

Impact Analysis

Because the allocated DMA memory is not freed on error, this can lead to a memory leak in the kernel. Over time, this could degrade system performance or stability due to resource exhaustion.

Hi! I’m here to help you understand CVE-2026-43202. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70