CVE-2026-72264

A flaw was found in the fbdev: tridentfb component of the Linux kernel. A memory leak occurs in the trident_pci_probe() function because memory allocated for the modelist is not properly freed in certain error paths. This could allow a local attacker to exhaust available memory resources, leading to a denial of service (DoS).

A moderate-impact memory leak flaw was found in the fbdev tridentfb driver in the Linux kernel. In trident_pci_probe(), memory allocated for the mode list via fb_videomode_to_modelist() is not freed in the function's error paths, which can allow a local attacker to exhaust available kernel memory resources and cause a denial of service. Red Hat Enterprise Linux (kernel and kernel-rt) and Red Hat In-Vehicle OS are not affected by this flaw because the vulnerable code is not present in the shipped kernel packages.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.