{"id":"CVE-2026-72272","title":"fbdev: radeon: fix potential memory leak in radeonfb_pci_register()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: radeon: fix potential memory leak in radeonfb_pci_register()\n\nThe function radeonfb_pci_register() allocates memory for modelist\n(by calling radeon_check_modes()…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < a94a4a0ec2684454934ba104988d6222836a572f","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 30a2ff955b66b16d4c98dc61f4fe8b3a57c6f7bb","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < c622a3eed6ad26879b6c0bc208fd6e3ffc4b7de3","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < f4dacbfd885f34222e67145294de9b8479aa021d","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 1c5387451176db5def499db809d718765f359a37","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < c2c795a320e7ef9aa69c7f4bd2c9ac07064eff9a","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 1b1b43342fbf11eaf2a8926b9ed4805579d772ac","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < df8c1101c9a08859da612b5d0a08d55d475522c6","Linux 2.6.12"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:53:50.959461Z"},"published":"2026-08-15","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:55:24.580Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-72272","references":[{"url":"https://git.kernel.org/stable/c/a94a4a0ec2684454934ba104988d6222836a572f"},{"url":"https://git.kernel.org/stable/c/30a2ff955b66b16d4c98dc61f4fe8b3a57c6f7bb"},{"url":"https://git.kernel.org/stable/c/c622a3eed6ad26879b6c0bc208fd6e3ffc4b7de3"},{"url":"https://git.kernel.org/stable/c/f4dacbfd885f34222e67145294de9b8479aa021d"},{"url":"https://git.kernel.org/stable/c/1c5387451176db5def499db809d718765f359a37"},{"url":"https://git.kernel.org/stable/c/c2c795a320e7ef9aa69c7f4bd2c9ac07064eff9a"},{"url":"https://git.kernel.org/stable/c/1b1b43342fbf11eaf2a8926b9ed4805579d772ac"},{"url":"https://git.kernel.org/stable/c/df8c1101c9a08859da612b5d0a08d55d475522c6"}],"tags":["cve.org"],"epss":0.0022,"epssPercentile":0.12554,"ingestedAt":"2026-11-06T18:00:12.583Z","slug":"CVE-2026-72272","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: radeon: fix potential memory leak in radeonfb_pci_register()\n\nThe function radeonfb_pci_register() allocates memory for modelist\n(by calling radeon_check_modes() which calls fb_add_videomode()).\nThe memory is appended to info->modelist, but is not freed in subsequent\nerror paths. Fix this by calling fb_destroy_modelist().\n\n## Affected\n\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < a94a4a0ec2684454934ba104988d6222836a572f`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 30a2ff955b66b16d4c98dc61f4fe8b3a57c6f7bb`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < c622a3eed6ad26879b6c0bc208fd6e3ffc4b7de3`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < f4dacbfd885f34222e67145294de9b8479aa021d`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 1c5387451176db5def499db809d718765f359a37`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < c2c795a320e7ef9aa69c7f4bd2c9ac07064eff9a`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 1b1b43342fbf11eaf2a8926b9ed4805579d772ac`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < df8c1101c9a08859da612b5d0a08d55d475522c6`\n- `Linux 2.6.12`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}