CVE-2026-72271
Received Received - Intake

BaseFortify

Vulnerability report for CVE-2026-72271, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: fbdev: i740fb: fix potential memory leak in i740fb_probe() In i740fb_probe(), the memory allocated in fb_videomode_to_modelist() for modelist is not freed in the error paths. Fix that by calling fb_destroy_modelist().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux_kernel linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a memory leak vulnerability in the Linux kernel's i740fb framebuffer driver. When probing the device, memory allocated for video modes is not properly freed if an error occurs during initialization. The fix involves calling fb_destroy_modelist() to release this memory.

Detection Guidance

This vulnerability is specific to the Linux kernel's i740fb driver and involves a memory leak in the i740fb_probe() function. Detection requires checking if the affected driver is loaded and if the kernel version is vulnerable. Use commands like 'lsmod | grep i740fb' to check if the driver is loaded and 'uname -a' to verify the kernel version.

Impact Analysis

The memory leak could gradually consume system memory over time if the driver is repeatedly initialized and fails. This may lead to reduced system performance or potential crashes due to memory exhaustion, particularly in systems using the i740fb driver.

Mitigation Strategies

To mitigate this vulnerability, update your Linux kernel to the latest patched version that includes the fix for CVE-2026-72271. If updating is not immediately possible, consider unloading the i740fb driver using 'modprobe -r i740fb' if it is not required for your system.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72271. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart