Answer in brief
CVE-2026-72267 records a Unknown severity vulnerability in fbdev: carminefb: fix potential memory leak in alloc_carmine_fb(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2026-72267 records a Unknown severity vulnerability in fbdev: carminefb: fix potential memory leak in alloc_carmine_fb(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=2ece5f43b041b96fa2a05107a10a6b0ea0c03a3b <97b6c3f6e82a526d95dcfbfcf1c42ba44c61c3d6 || >=2ece5f43b041b96fa2a05107a10a6b0ea0c03a3b <6069044e74b7510bf2f034ccd049bc962fb9c765 || >=2ece5f43b041b96fa2a05107a10a6b0ea0c03a3b <b51990be8411335c263b51e9f4def1e84bfaa923 || >=2ece5f43b041b96fa2a05107a10a6b0ea0c03a3b <d21e6747f3f68dcce59b5d2205f98633d28f69eb || >=2ece5f43b041b96fa2a05107a10a6b0ea0c03a3b <bcc43b2f7410eddb21f73e9a650499a6432c9383 || >=2ece5f43b041b96fa2a05107a10a6b0ea0c03a3b <d81860691e4cfa14d596136ea2727f244e9e5950 || >=2ece5f43b041b96fa2a05107a10a6b0ea0c03a3b <dae8f6ddc35cb1673dba32d2fd8f1f85cd377adf || >=2ece5f43b041b96fa2a05107a10a6b0ea0c03a3b <6fcca16a2b19c37f60693c56cbc0c923364ff3ef | 97b6c3f6e82a526d95dcfbfcf1c42ba44c61c3d6, 6069044e74b7510bf2f034ccd049bc962fb9c765, b51990be8411335c263b51e9f4def1e84bfaa923, d21e6747f3f68dcce59b5d2205f98633d28f69eb, bcc43b2f7410eddb21f73e9a650499a6432c9383, d81860691e4cfa14d596136ea2727f244e9e5950, dae8f6ddc35cb1673dba32d2fd8f1f85cd377adf, 6fcca16a2b19c37f60693c56cbc0c923364ff3ef |
| Linux/Linuxgeneric | 2.6.27 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() The memory allocated for modelist in fb_videomode_to_modelist() is not freed in the subsequent error path. Fix that by calling fb_destroy_modelist()
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=2ece5f43b041b96fa2a05107a10a6b0ea0c03a3b <97b6c3f6e82a526d95dcfbfcf1c42ba44c61c3d6 || >=2ece5f43b041b96fa2a05107a10a6b0ea0c03a3b <6069044e74b7510bf2f034ccd049bc962fb9c765 || >=2ece5f43b041b96fa2a05107a10a6b0ea0c03a3b <b51990be8411335c263b51e9f4def1e84bfaa923 || >=2ece5f43b041b96fa2a05107a10a6b0ea0c03a3b <d21e6747f3f68dcce59b5d2205f98633d28f69eb || >=2ece5f43b041b96fa2a05107a10a6b0ea0c03a3b <bcc43b2f7410eddb21f73e9a650499a6432c9383 || >=2ece5f43b041b96fa2a05107a10a6b0ea0c03a3b <d81860691e4cfa14d596136ea2727f244e9e5950 || >=2ece5f43b041b96fa2a05107a10a6b0ea0c03a3b <dae8f6ddc35cb1673dba32d2fd8f1f85cd377adf || >=2ece5f43b041b96fa2a05107a10a6b0ea0c03a3b <6fcca16a2b19c37f60693c56cbc0c923364ff3ef | 97b6c3f6e82a526d95dcfbfcf1c42ba44c61c3d6, 6069044e74b7510bf2f034ccd049bc962fb9c765, b51990be8411335c263b51e9f4def1e84bfaa923, d21e6747f3f68dcce59b5d2205f98633d28f69eb, bcc43b2f7410eddb21f73e9a650499a6432c9383, d81860691e4cfa14d596136ea2727f244e9e5950, dae8f6ddc35cb1673dba32d2fd8f1f85cd377adf, 6fcca16a2b19c37f60693c56cbc0c923364ff3ef |
| Linux/Linuxgeneric | 2.6.27 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() The memory allocated for modelist in fb_videomode_to_modelist() is not freed in the subsequent error path. Fix that by calling fb_destroy_modelist()
Quoted source text, attributed separately from HOL analysis.