In the Linux kernel, the following vulnerability has been resolved:

fbdev: vesafb: fix memory leak in vesafb_probe()

Since commit 73ce73c30ba9 ("fbdev: Transfer video= option strings to
caller; clarify ownership") the string returned from fb_get_options()
is expected to be freed by the caller. But the string is not freed in
vesafb_probe(). Fix that by freeing the option string after setup.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00209.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 affected < 124df55c7201d011a3fead2205685b6c47eae093
73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 affected < 43af398217ca8940bf30643fd1150b4c655b8a88
73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 affected < 58bc18e03481b62f0ec53fe47f36615d52660a7d
73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 affected < 7b96ce9f8e47538c3c6eebbb217c94d696975cac
73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 affected < b15d708995c01bbffe7dcd634a31959f6805bed3
Linux Linux affected
Version Status Constraints
6.4 affected —
0 unaffected < 6.4
6.6.145 unaffected ≤ 6.6.*
6.12.97 unaffected ≤ 6.12.*
6.18.40 unaffected ≤ 6.18.*
7.1.5 unaffected ≤ 7.1.*
7.2-rc1 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/124df55c7201d011a3fead2205685b6c47eae093 cve-icon cve-icon
https://git.kernel.org/stable/c/43af398217ca8940bf30643fd1150b4c655b8a88 cve-icon cve-icon
https://git.kernel.org/stable/c/58bc18e03481b62f0ec53fe47f36615d52660a7d cve-icon cve-icon
https://git.kernel.org/stable/c/7b96ce9f8e47538c3c6eebbb217c94d696975cac cve-icon cve-icon
https://git.kernel.org/stable/c/b15d708995c01bbffe7dcd634a31959f6805bed3 cve-icon cve-icon
History

Sat, 15 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: fbdev: vesafb: fix memory leak in vesafb_probe() Since commit 73ce73c30ba9 ("fbdev: Transfer video= option strings to caller; clarify ownership") the string returned from fb_get_options() is expected to be freed by the caller. But the string is not freed in vesafb_probe(). Fix that by freeing the option string after setup.
Title fbdev: vesafb: fix memory leak in vesafb_probe()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:54:52.121Z

Reserved: 2026-08-09T03:40:39.915Z

Link: CVE-2026-72266

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:21:55.090

Modified: 2026-08-15T06:21:55.090

Link: CVE-2026-72266

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.