{
  "schema_version": "1.6.1",
  "id": "RPI-CVE-2026-72269",
  "modified": "2026-10-07T17:22:01Z",
  "upstream": [
    "CVE-2026-72269"
  ],
  "published": "2026-08-15T06:04:33Z",
  "summary": "fbdev: uvesafb: fix potential memory leak in uvesafb_probe()",
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: uvesafb: fix potential memory leak in uvesafb_probe()\n\nDue to an incorrect goto label, memory allocated for modedb and modelist\nin uvesafb_vbe_init() is not freed in some error paths. Fix this by\nupdating the goto label.",
  "affected": [
    {
      "package": {
        "ecosystem": "Raspberry Pi OS:12",
        "name": "linux"
      },
      "versions": [
        "1:6.1.47-1+rpt4"
      ],
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-2712",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v6",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v7",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v7l",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v8",
            "binary_version": "1:6.1.47-1+rpt4"
          }
        ]
      },
      "database_specific": {
        "per_version": {
          "1:6.1.47-1+rpt4": {
            "linux_commit": "655fc658a15ae7a6f37103754adb39ba52a9a14e",
            "upstream_version": "6.1.47",
            "assessment": "commit ancestry (strak rule)",
            "upstream_fixed": "6.1.178",
            "compiled_filter": false
          }
        }
      }
    }
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-72269"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/f413512c79c2d0012c6ed486e4025e1489e6d443"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/61d46d6f5dc163aa5f3548633b5f392b021620ff"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/81985921e14f5b471fc0ffe990826d0bda52c0cf"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/c53fdf7ee65af1b9b4566cc437d3754ce7b47118"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/c606c28085a3106c91c6d37bbbbf97b451d572ce"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/12fe6a56506ed3bf0aaf6130a29102ce1fce62da"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/aa387a3e51808f580b51593e3c2f3d4703d91c1a"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/033e56fed09047ee63072e9f58789f40c1c7079d"
    }
  ],
  "database_specific": {
    "source": "https://git.kernel.org/pub/scm/linux/security/vulns.git",
    "upstream_modified": "2026-08-17T05:24:08Z"
  }
}
