CVE-2026-72269

Опубликовано: 15 авг. 2026

Источник: redhat

CVSS3: 5.5

EPSS Низкий

Описание

A flaw was found in the Linux kernel's framebuffer device (fbdev) component, specifically within the uvesafb driver. This vulnerability occurs because memory allocated for display modes is not properly released during certain error handling paths. This oversight can lead to a memory leak, which might exhaust system resources and cause the system to become unresponsive, resulting in a Denial of Service (DoS).

Затронутые пакеты

Платформа	Пакет	Состояние
Red Hat Enterprise Linux 10	kernel	Not affected
Red Hat Enterprise Linux 6	kernel	Not affected
Red Hat Enterprise Linux 7	kernel	Not affected
Red Hat Enterprise Linux 7	kernel-rt	Not affected
Red Hat Enterprise Linux 8	kernel	Not affected
Red Hat Enterprise Linux 8	kernel-rt	Not affected
Red Hat Enterprise Linux 9	kernel	Not affected
Red Hat Enterprise Linux 9	kernel-rt	Not affected

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-772

https://bugzilla.redhat.com/show_bug.cgi?id=2516309kernel: fbdev: uvesafb: fix potential memory leak in uvesafb_probe()

EPSS

Процентиль: 12%

0.0021

Низкий

5.5 Medium

CVSS3

Связанные уязвимости

CVE-2026-72269

ubuntu

2 дня назад

In the Linux kernel, the following vulnerability has been resolved: fbdev: uvesafb: fix potential memory leak in uvesafb_probe() Due to an incorrect goto label, memory allocated for modedb and modelist in uvesafb_vbe_init() is not freed in some error paths. Fix this by updating the goto label.