---
id: CVE-2026-72272
title: 'fbdev: radeon: fix potential memory leak in radeonfb_pci_register()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  fbdev: radeon: fix potential memory leak in radeonfb_pci_register()

  The function radeonfb_pci_register() allocates memory for modelist
  (by calling radeon_check_modes()…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    a94a4a0ec2684454934ba104988d6222836a572f
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    30a2ff955b66b16d4c98dc61f4fe8b3a57c6f7bb
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    c622a3eed6ad26879b6c0bc208fd6e3ffc4b7de3
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    f4dacbfd885f34222e67145294de9b8479aa021d
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    1c5387451176db5def499db809d718765f359a37
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    c2c795a320e7ef9aa69c7f4bd2c9ac07064eff9a
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    1b1b43342fbf11eaf2a8926b9ed4805579d772ac
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    df8c1101c9a08859da612b5d0a08d55d475522c6
  - Linux 2.6.12
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:53:50.959461Z'
published: '2026-08-15'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:55:24.580Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-72272'
references:
  - url: 'https://git.kernel.org/stable/c/a94a4a0ec2684454934ba104988d6222836a572f'
  - url: 'https://git.kernel.org/stable/c/30a2ff955b66b16d4c98dc61f4fe8b3a57c6f7bb'
  - url: 'https://git.kernel.org/stable/c/c622a3eed6ad26879b6c0bc208fd6e3ffc4b7de3'
  - url: 'https://git.kernel.org/stable/c/f4dacbfd885f34222e67145294de9b8479aa021d'
  - url: 'https://git.kernel.org/stable/c/1c5387451176db5def499db809d718765f359a37'
  - url: 'https://git.kernel.org/stable/c/c2c795a320e7ef9aa69c7f4bd2c9ac07064eff9a'
  - url: 'https://git.kernel.org/stable/c/1b1b43342fbf11eaf2a8926b9ed4805579d772ac'
  - url: 'https://git.kernel.org/stable/c/df8c1101c9a08859da612b5d0a08d55d475522c6'
tags:
  - cve.org
epss: 0.0022
epssPercentile: 0.12554
ingestedAt: '2026-11-06T18:00:12.583Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

fbdev: radeon: fix potential memory leak in radeonfb_pci_register()

The function radeonfb_pci_register() allocates memory for modelist
(by calling radeon_check_modes() which calls fb_add_videomode()).
The memory is appended to info->modelist, but is not freed in subsequent
error paths. Fix this by calling fb_destroy_modelist().

## Affected

- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < a94a4a0ec2684454934ba104988d6222836a572f`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 30a2ff955b66b16d4c98dc61f4fe8b3a57c6f7bb`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < c622a3eed6ad26879b6c0bc208fd6e3ffc4b7de3`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < f4dacbfd885f34222e67145294de9b8479aa021d`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 1c5387451176db5def499db809d718765f359a37`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < c2c795a320e7ef9aa69c7f4bd2c9ac07064eff9a`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 1b1b43342fbf11eaf2a8926b9ed4805579d772ac`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < df8c1101c9a08859da612b5d0a08d55d475522c6`
- `Linux 2.6.12`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.