CVE-2026-72265 - Vulnerability Details

- fbdev: nvidia: fix potential memory leak in nvidiafb_probe()

Description

In the Linux kernel, the following vulnerability has been resolved:

fbdev: nvidia: fix potential memory leak in nvidiafb_probe()

In nvidiafb_probe(), the memory allocated for modelist in
nvidia_set_fbinfo() is not freed in the subsequent error paths.
Fix that by calling fb_destroy_modelist().

Published: 2026-08-15

Score: n/a

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 7e747f7b17ccce750502fd4d0b4e866fe4f066a6
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 2515cd60f6b5ad680ed164aa6bd19b05270af34c
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 508704de34fb8c0dcbbf13397212363bbf0974de
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 6ca48f23ce61a26349d7d084fb63b70499137c8e
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< e8172773e5251f4df2eed74caab6ca3195fed1ea
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 009a8514745b16c468acc25aa00539abbf38e1b5
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< ed3b3eb212441fb5f287dfd24ebafe11d634f009
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 85f5e38c162bdf9dbbe197275d416402712f3707

Linux

affected

Version	Status	Constraints
`2.6.12`	affected	—
`0`	unaffected	< 2.6.12
`5.10.261`	unaffected	≤ 5.10.*
`5.15.212`	unaffected	≤ 5.15.*
`6.1.178`	unaffected	≤ 6.1.*
`6.6.145`	unaffected	≤ 6.6.*
`6.12.97`	unaffected	≤ 6.12.*
`6.18.40`	unaffected	≤ 6.18.*
`7.1.5`	unaffected	≤ 7.1.*
`7.2-rc1`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,7e747f7b17ccce750502fd4d0b4e866fe4f066a6)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,2515cd60f6b5ad680ed164aa6bd19b05270af34c)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,508704de34fb8c0dcbbf13397212363bbf0974de)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,6ca48f23ce61a26349d7d084fb63b70499137c8e)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,e8172773e5251f4df2eed74caab6ca3195fed1ea)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,009a8514745b16c468acc25aa00539abbf38e1b5)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,ed3b3eb212441fb5f287dfd24ebafe11d634f009)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,85f5e38c162bdf9dbbe197275d416402712f3707)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`2.6.12`	affected	semver	—
`[0,2.6.12)`	unaffected	semver	—
`[5.10.261,5.11.0)`	unaffected	semver	—
`[5.15.212,5.16.0)`	unaffected	semver	—
`[6.1.178,6.2.0)`	unaffected	semver	—
`[6.6.145,6.7.0)`	unaffected	semver	—
`[6.12.97,6.13.0)`	unaffected	semver	—
`[6.18.40,6.19.0)`	unaffected	semver	—
`[7.1.5,7.2.0)`	unaffected	semver	—
`[7.2-rc1,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0022.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/009a8514745b16c468acc25aa00539abbf38e1b5
https://git.kernel.org/stable/c/2515cd60f6b5ad680ed164aa6bd19b05270af34c
https://git.kernel.org/stable/c/508704de34fb8c0dcbbf13397212363bbf0974de
https://git.kernel.org/stable/c/6ca48f23ce61a26349d7d084fb63b70499137c8e
https://git.kernel.org/stable/c/7e747f7b17ccce750502fd4d0b4e866fe4f066a6
https://git.kernel.org/stable/c/85f5e38c162bdf9dbbe197275d416402712f3707
https://git.kernel.org/stable/c/e8172773e5251f4df2eed74caab6ca3195fed1ea
https://git.kernel.org/stable/c/ed3b3eb212441fb5f287dfd24ebafe11d634f009

History

Sat, 15 Aug 2026 10:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-401

Sat, 15 Aug 2026 06:00:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: fbdev: nvidia: fix potential memory leak in nvidiafb_probe() In nvidiafb_probe(), the memory allocated for modelist in nvidia_set_fbinfo() is not freed in the subsequent error paths. Fix that by calling fb_destroy_modelist().
Title		fbdev: nvidia: fix potential memory leak in nvidiafb_probe()
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/009a8514745b16c468acc25aa00539abbf38e1b5 https://git.kernel.org/stable/c/2515cd60f6b5ad680ed164aa6bd19b05270af34c https://git.kernel.org/stable/c/508704de34fb8c0dcbbf13397212363bbf0974de https://git.kernel.org/stable/c/6ca48f23ce61a26349d7d084fb63b70499137c8e https://git.kernel.org/stable/c/7e747f7b17ccce750502fd4d0b4e866fe4f066a6 https://git.kernel.org/stable/c/85f5e38c162bdf9dbbe197275d416402712f3707 https://git.kernel.org/stable/c/e8172773e5251f4df2eed74caab6ca3195fed1ea https://git.kernel.org/stable/c/ed3b3eb212441fb5f287dfd24ebafe11d634f009

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-15T05:54:51.506Z

Updated: 2026-08-15T05:54:51.506Z

Reserved: 2026-08-09T03:40:39.915Z

Link: CVE-2026-72265

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-15T06:21:54.913

Modified: 2026-08-15T06:21:54.913

Link: CVE-2026-72265

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-08-15T19:30:03Z

Weaknesses

CWE-401
Missing Release of Memory after Effective Lifetime

Tracking

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object