Strix
56.8K

CVE-2026-72268

UnknownEPSS 0.21%

Last modified

CVE-2026-72268 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe() In tdfxfb_probe(), the memory allocated for modelist using fb_videomode_to_modelist() when CONFIG_FB_3DFX_I2C is defined, is not freed in the subsequent error paths. Fix that by calling fb_destroy_modelist().. EPSS estimates a 0.21% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe() In tdfxfb_probe(), the memory allocated for modelist using fb_videomode_to_modelist() when CONFIG_FB_3DFX_I2C is defined, is not freed in the subsequent error paths. Fix that by calling fb_destroy_modelist().

Metrics

EPSS Probability
0.21%

11.6th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 215059d2421f95c30d1fca6ff31357fcae9f67dc, < 237611edf15172e4dc7fa9b3b71c2445602d3459; >= 215059d2421f95c30d1fca6ff31357fcae9f67dc, < 2199d70efc5bea0e9b4462a4f9e4c3d3c21c5d34; >= 215059d2421f95c30d1fca6ff31357fcae9f67dc, < b039e0693df003c5baa1e89630344f92a78afb15; >= 215059d2421f95c30d1fca6ff31357fcae9f67dc, < dfbb1a695d8891774c80c0e2a9192afb66469eb7; >= 215059d2421f95c30d1fca6ff31357fcae9f67dc, < b7b26adc2718ca8f81ca75cd03aee94269d00e8a; >= 215059d2421f95c30d1fca6ff31357fcae9f67dc, < e1ca9b8559e0f5959228626bdeaae530a1ee0337; >= 215059d2421f95c30d1fca6ff31357fcae9f67dc, < 2fd16a94bea5e0c3e93791436cf8a800b175762a; >= 215059d2421f95c30d1fca6ff31357fcae9f67dc, < bb019d755366cc3e777a12d4bf457ff289837370
LinuxLinux2.6.30

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-72268?
In the Linux kernel, the following vulnerability has been resolved: fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe() In tdfxfb_probe(), the memory allocated for modelist using fb_videomode_to_modelist() when CONFIG_FB_3DFX_I2C is defined, is not freed in the subsequent error paths. Fix that by calling fb_destroy_modelist().
How severe is CVE-2026-72268?
Severity scoring for CVE-2026-72268 is pending analysis. The EPSS model estimates a 0.21% probability of exploitation in the next 30 days.
How do I fix CVE-2026-72268?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-72268?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST