CVE-2026-43264

A flaw was found in the Linux kernel's fbdev (framebuffer device) subsystem. This vulnerability, a reference count (refcount) leak, occurs within the of_get_display_timings() function. Specifically, when of_parse_phandle() returns a device_node with an incremented refcount, certain error paths fail to decrement this count. This can lead to resource exhaustion, potentially resulting in a denial of service (DoS) for affected systems.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.