CVE-2026-72270 fbdev: s3fb: fix potential memory leak in s3_pci_probe()

In the Linux kernel, the following vulnerability has been resolved: fbdev: s3fb: fix potential memory leak in s3pciprobe In s3pciprobe, the memory allocated for modelist using fbvideomodetomodelist is not freed in subsequent error paths. Fix that by calling fbdestroymodelist...

CVE-2026-72270 fbdev: s3fb: fix potential memory leak in s3_pci_probe()

In the Linux kernel, the following vulnerability has been resolved: fbdev: s3fb: fix potential memory leak in s3pciprobe In s3pciprobe, the memory allocated for modelist using fbvideomodetomodelist is not freed in subsequent error paths. Fix that by calling fbdestroymodelist...

CVE-2026-72269 fbdev: uvesafb: fix potential memory leak in uvesafb_probe()

In the Linux kernel, the following vulnerability has been resolved: fbdev: uvesafb: fix potential memory leak in uvesafbprobe Due to an incorrect goto label, memory allocated for modedb and modelist in uvesafbvbeinit is not freed in some error paths. Fix this by updating the goto label...

EUVD-2026-59167

In the Linux kernel, the following vulnerability has been resolved: fbdev: tdfxfb: fix potential memory leak in tdfxfbprobe In tdfxfbprobe, the memory allocated for modelist using fbvideomodetomodelist when CONFIGFB3DFXI2C is defined, is not freed in the subsequent error paths. Fix that by callin...

EUVD-2026-59168

In the Linux kernel, the following vulnerability has been resolved: fbdev: uvesafb: fix potential memory leak in uvesafbprobe Due to an incorrect goto label, memory allocated for modedb and modelist in uvesafbvbeinit is not freed in some error paths. Fix this by updating the goto label...

CVE-2026-72269 fbdev: uvesafb: fix potential memory leak in uvesafb_probe()

In the Linux kernel, the following vulnerability has been resolved: fbdev: uvesafb: fix potential memory leak in uvesafbprobe Due to an incorrect goto label, memory allocated for modedb and modelist in uvesafbvbeinit is not freed in some error paths. Fix this by updating the goto label...

CVE-2026-72267

CVE-2026-72267 affects the Linux kernel fbdev CarmineFB component. The issue is a memory leak: modelist allocated in fb_videomode_to_modelist() is not freed on error paths, addressed by calling fb_destroy_modelist(). Connected sources confirm the exact fix and function sequence across multiple ke...

EUVD-2026-59166

In the Linux kernel, the following vulnerability has been resolved: fbdev: carminefb: fix potential memory leak in alloccarminefb The memory allocated for modelist in fbvideomodetomodelist is not freed in the subsequent error path. Fix that by calling fbdestroymodelist...

CVE-2026-72265 fbdev: nvidia: fix potential memory leak in nvidiafb_probe()

In the Linux kernel, the following vulnerability has been resolved: fbdev: nvidia: fix potential memory leak in nvidiafbprobe In nvidiafbprobe, the memory allocated for modelist in nvidiasetfbinfo is not freed in the subsequent error paths. Fix that by calling fbdestroymodelist...

CVE-2026-72265

In the Linux kernel, CVE-2026-72265 fixes a memory leak in fbdev/nvidiafb_probe. In nvidiafb_probe(), memory allocated for modelist in nvidia_set_fbinfo() was not freed on error paths; the fix calls fb_destroy_modelist() to free it. No exploitation details are provided in the documents.

CVE-2026-72264 fbdev: tridentfb: fix potential memory leak in trident_pci_probe()

In the Linux kernel, the following vulnerability has been resolved: fbdev: tridentfb: fix potential memory leak in tridentpciprobe In tridentpciprobe, the memory allocated for modelist using fbvideomodetomodelist is not freed in subsequent error paths. Fix that by calling fbdestroymodelist...

CVE-2026-72245

CVE-2026-72245 relates to the Linux kernel GPU host1x driver, where a reference leak could occur in host1x_device_parse_dt() after device_initialize(). The embedded struct device was freed directly via kfree(device) in the error path, bypassing normal device lifetime handling and leaking a refere...

EUVD-2026-59144

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix device reference leak in host1xdeviceparsedt error path After deviceinitialize, the embedded struct device in struct host1xdevice should be released through the device core with putdevice. In host1xdeviceadd, if...

CVE-2026-72245 gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix device reference leak in host1xdeviceparsedt error path After deviceinitialize, the embedded struct device in struct host1xdevice should be released through the device core with putdevice. In host1xdeviceadd, if...

CVE-2026-72245 gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix device reference leak in host1xdeviceparsedt error path After deviceinitialize, the embedded struct device in struct host1xdevice should be released through the device core with putdevice. In host1xdeviceadd, if...

EUVD-2026-59130

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid request storms during pending request batadvsendttrequest allocates a ttreqnode when none exists for the destination originator node. This should prevent that a multiple TT requests are send at the same time...

CVE-2026-72231 batman-adv: tt: avoid request storms during pending request

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid request storms during pending request batadvsendttrequest allocates a ttreqnode when none exists for the destination originator node. This should prevent that a multiple TT requests are send at the same time...

CVE-2026-72230

CVE-2026-72230 concerns batman-adv in the Linux kernel where batadv_frag_send_packet() may mis-handle errors from a pre-check for empty payload or zero fragment size, implying the skb isn’t consumed as assumed. The fix ensures the failed pre-check uses the same error handling code as the rest of ...

EUVD-2026-59129

In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: free unfragmentable packet The caller of batadvfragsendpacket assume that the skb provided to the function are always consumed. But the pre-check for an empty payload or the zero fragment size returned an error...

CVE-2026-72223

The CVE-2026-72223 entry concerns the Linux kernel, specifically the nvdimm/btt component. The vulnerability stems from memory allocated by btt_freelist_init(), btt_rtt_init(), and btt_maplocks_init() not being freed on certain discover_arenas() error paths, causing a memory leak when arena disco...