CVE-2026-72271

A flaw was found in the Linux kernel's fbdev i740fb driver. This vulnerability occurs in the i740fb_probe() function where memory allocated for the modelist is not properly freed in error paths. This oversight can lead to a memory leak, potentially impacting system stability and performance over time.

A moderate-severity memory leak flaw was found in the Linux kernel fbdev i740fb driver (drivers/video/fbdev/i740fb.c). In the i740fb_probe() function, the memory allocated by fb_videomode_to_modelist() for the video mode list is not freed when the function exits through an error path. When the driver probe fails, kernel memory is leaked, and repeated failed probes could progressively exhaust memory and degrade system availability. The Red Hat CVSS v3 score for this flaw is 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), reflecting a local attack vector requiring low privileges, with high impact on availability and no impact on confidentiality or integrity.

None of the Red Hat products tracked for this flaw are affected: all Red Hat Enterprise Linux (kernel and kernel-rt) and Red Hat In-Vehicle OS (kernel and kernel-ivos-qualcomm) update streams are recorded as NOT AFFECTED with the justification that the vulnerable code is not present in the shipped Red Hat kernel builds. Because the affected code is not shipped, Red Hat customers are not exposed to this issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.