{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"a94a4a0ec2684454934ba104988d6222836a572f","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"30a2ff955b66b16d4c98dc61f4fe8b3a57c6f7bb","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"c622a3eed6ad26879b6c0bc208fd6e3ffc4b7de3","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"f4dacbfd885f34222e67145294de9b8479aa021d","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"1c5387451176db5def499db809d718765f359a37","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"c2c795a320e7ef9aa69c7f4bd2c9ac07064eff9a","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"1b1b43342fbf11eaf2a8926b9ed4805579d772ac","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"df8c1101c9a08859da612b5d0a08d55d475522c6","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"2.6.12"},{"lessThan":"2.6.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.261","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.145","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.97","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.40","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.5","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.2","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2026-72272","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: radeon: fix potential memory leak in radeonfb_pci_register()\n\nThe function radeonfb_pci_register() allocates memory for modelist\n(by calling radeon_check_modes() which calls fb_add_videomode()).\nThe memory is appended to info->modelist, but is not freed in subsequent\nerror paths. Fix this by calling fb_destroy_modelist().","epss":{"date":"2026-11-06","percentile":0.12554,"score":0.0022},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793985581807,"publishedAt":1786773295825,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/a94a4a0ec2684454934ba104988d6222836a572f"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/30a2ff955b66b16d4c98dc61f4fe8b3a57c6f7bb"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/c622a3eed6ad26879b6c0bc208fd6e3ffc4b7de3"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/f4dacbfd885f34222e67145294de9b8479aa021d"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/1c5387451176db5def499db809d718765f359a37"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/c2c795a320e7ef9aa69c7f4bd2c9ac07064eff9a"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/1b1b43342fbf11eaf2a8926b9ed4805579d772ac"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/df8c1101c9a08859da612b5d0a08d55d475522c6"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/1b1b43342fbf11eaf2a8926b9ed4805579d772ac"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/1c5387451176db5def499db809d718765f359a37"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/30a2ff955b66b16d4c98dc61f4fe8b3a57c6f7bb"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/a94a4a0ec2684454934ba104988d6222836a572f"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/c2c795a320e7ef9aa69c7f4bd2c9ac07064eff9a"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/c622a3eed6ad26879b6c0bc208fd6e3ffc4b7de3"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/df8c1101c9a08859da612b5d0a08d55d475522c6"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/f4dacbfd885f34222e67145294de9b8479aa021d"}],"remediation":[],"revision":"08541263d43e8f34496f8babde34a0c4e2dc5520b05c395d096a8f2cfcedf124","sources":[{"modifiedAt":1793984124580,"name":"CNA: Linux","retrievedAt":1793986081627,"url":"https://www.cve.org/CVERecord?id=CVE-2026-72272"},{"modifiedAt":1793985581807,"name":"NVD","retrievedAt":1793989704826,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72272"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793986128769,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-72272"}],"ssvc":{"assessedAt":1793984030959,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"fbdev: radeon: fix potential memory leak in radeonfb_pci_register()","updatedAt":1793989704826}