CVE-2026-72265 - Vulnerability Details

- fbdev: nvidia: fix potential memory leak in nvidiafb_probe()

Description

In the Linux kernel, the following vulnerability has been resolved:

fbdev: nvidia: fix potential memory leak in nvidiafb_probe()

In nvidiafb_probe(), the memory allocated for modelist in
nvidia_set_fbinfo() is not freed in the subsequent error paths.
Fix that by calling fb_destroy_modelist().

Published: 2026-08-15

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 7e747f7b17ccce750502fd4d0b4e866fe4f066a6
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 2515cd60f6b5ad680ed164aa6bd19b05270af34c
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 508704de34fb8c0dcbbf13397212363bbf0974de
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 6ca48f23ce61a26349d7d084fb63b70499137c8e
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< e8172773e5251f4df2eed74caab6ca3195fed1ea
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 009a8514745b16c468acc25aa00539abbf38e1b5
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< ed3b3eb212441fb5f287dfd24ebafe11d634f009
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 85f5e38c162bdf9dbbe197275d416402712f3707

Linux

affected

Version	Status	Constraints
`2.6.12`	affected	—
`0`	unaffected	< 2.6.12
`5.10.261`	unaffected	≤ 5.10.*
`5.15.212`	unaffected	≤ 5.15.*
`6.1.178`	unaffected	≤ 6.1.*
`6.6.145`	unaffected	≤ 6.6.*
`6.12.97`	unaffected	≤ 6.12.*
`6.18.40`	unaffected	≤ 6.18.*
`7.1.5`	unaffected	≤ 7.1.*
`7.2`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,7e747f7b17ccce750502fd4d0b4e866fe4f066a6)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,2515cd60f6b5ad680ed164aa6bd19b05270af34c)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,508704de34fb8c0dcbbf13397212363bbf0974de)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,6ca48f23ce61a26349d7d084fb63b70499137c8e)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,e8172773e5251f4df2eed74caab6ca3195fed1ea)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,009a8514745b16c468acc25aa00539abbf38e1b5)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,ed3b3eb212441fb5f287dfd24ebafe11d634f009)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,85f5e38c162bdf9dbbe197275d416402712f3707)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`2.6.12`	affected	semver	—
`[0,2.6.12)`	unaffected	semver	—
`[5.10.261,5.11.0)`	unaffected	semver	—
`[5.15.212,5.16.0)`	unaffected	semver	—
`[6.1.178,6.2.0)`	unaffected	semver	—
`[6.6.145,6.7.0)`	unaffected	semver	—
`[6.12.97,6.13.0)`	unaffected	semver	—
`[6.18.40,6.19.0)`	unaffected	semver	—
`[7.1.5,7.2.0)`	unaffected	semver	—
`[7.2-rc1,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No solution or workaround provided in the CVE record.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
Ubuntu USN	USN-8876-1	Linux kernel (Azure CVM) vulnerabilities
Ubuntu USN	USN-8875-1	Linux kernel vulnerabilities
Ubuntu USN	USN-8877-1	Linux kernel (GCP) vulnerabilities
Ubuntu USN	USN-8878-1	Linux kernel (GCP) vulnerabilities
Ubuntu USN	USN-8879-1	Linux kernel (Oracle) vulnerabilities
Ubuntu USN	USN-8887-1	Linux kernel vulnerabilities
Ubuntu USN	USN-8888-1	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-8889-1	Linux kernel (OEM) vulnerabilities
Ubuntu USN	USN-8887-2	Linux kernel (AWS) vulnerabilities
Ubuntu USN	USN-8888-2	Linux kernel (Azure) vulnerabilities

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0022.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/009a8514745b16c468acc25aa00539abbf38e1b5
https://git.kernel.org/stable/c/2515cd60f6b5ad680ed164aa6bd19b05270af34c
https://git.kernel.org/stable/c/508704de34fb8c0dcbbf13397212363bbf0974de
https://git.kernel.org/stable/c/6ca48f23ce61a26349d7d084fb63b70499137c8e
https://git.kernel.org/stable/c/7e747f7b17ccce750502fd4d0b4e866fe4f066a6
https://git.kernel.org/stable/c/85f5e38c162bdf9dbbe197275d416402712f3707
https://git.kernel.org/stable/c/e8172773e5251f4df2eed74caab6ca3195fed1ea
https://git.kernel.org/stable/c/ed3b3eb212441fb5f287dfd24ebafe11d634f009
https://lore.kernel.org/linux-cve-announce/2026081555-CVE-2026-72265-ff96@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-72265
https://www.cve.org/CVERecord?id=CVE-2026-72265

History

Sat, 22 Aug 2026 08:45:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-401

Wed, 19 Aug 2026 00:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-772
References		https://lore.kernel.org/linux-cve-announce/2026081555-CVE-2026-72265-ff96@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-72265 https://www.cve.org/CVERecord?id=CVE-2026-72265
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Low`

Sat, 15 Aug 2026 10:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-401

Sat, 15 Aug 2026 06:00:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: fbdev: nvidia: fix potential memory leak in nvidiafb_probe() In nvidiafb_probe(), the memory allocated for modelist in nvidia_set_fbinfo() is not freed in the subsequent error paths. Fix that by calling fb_destroy_modelist().
Title		fbdev: nvidia: fix potential memory leak in nvidiafb_probe()
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/009a8514745b16c468acc25aa00539abbf38e1b5 https://git.kernel.org/stable/c/2515cd60f6b5ad680ed164aa6bd19b05270af34c https://git.kernel.org/stable/c/508704de34fb8c0dcbbf13397212363bbf0974de https://git.kernel.org/stable/c/6ca48f23ce61a26349d7d084fb63b70499137c8e https://git.kernel.org/stable/c/7e747f7b17ccce750502fd4d0b4e866fe4f066a6 https://git.kernel.org/stable/c/85f5e38c162bdf9dbbe197275d416402712f3707 https://git.kernel.org/stable/c/e8172773e5251f4df2eed74caab6ca3195fed1ea https://git.kernel.org/stable/c/ed3b3eb212441fb5f287dfd24ebafe11d634f009

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-15T05:54:51.506Z

Updated: 2026-08-17T05:11:24.514Z

Reserved: 2026-08-09T03:40:39.915Z

Link: CVE-2026-72265

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-15T06:21:54.913

Modified: 2026-08-17T06:18:28.950

Link: CVE-2026-72265

Redhat

Severity : Low

Publid Date: 2026-08-15T00:00:00Z

Links: CVE-2026-72265 - Bugzilla

OpenCVE Enrichment

Updated: 2026-08-22T09:30:17Z

Weaknesses

CWE-772
Missing Release of Resource after Effective Lifetime

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object