Executive brief
A memory leak vulnerability was identified in the Linux kernel's au1200fb framebuffer driver. This driver is responsible for managing display output on specific hardware platforms. If the driver fails to initialize correctly, it may fail to release system memory, which could eventually lead to reduced system performance or instability if triggered repeatedly.
Technical details
A memory leak exists in the au1200fb_drv_probe() function within drivers/video/fbdev/au1200fb.c. When the function calls platform_get_irq() and encounters an error, it returns the error code immediately without executing the necessary cleanup routines for previously allocated resources. An attacker with local access could potentially exploit this by repeatedly triggering probe failures (if the environment allows) to exhaust system memory. The fix introduces a goto label to ensure that proper resource deallocation occurs even when an IRQ retrieval failure happens.
Affected products
- Linux Linux Kernel All versions prior to the fixed stable releases (e.g., 6.1, 6.6, 6.10, etc.)
Timeline
- 2026-02-03: other: Patch authored
- 2026-05-27: advisory: NVD publication date
References
- https://git.kernel.org/stable/c/071d8fb757a8318f72c8e02898c2cf7e14e21fb6
- https://git.kernel.org/stable/c/3d4202ee6494c0d576cdc104b12e0834ca8136a8
- https://git.kernel.org/stable/c/3e5349e54113e2dce1a659c57935e18032742e56
- https://git.kernel.org/stable/c/762a26818934241b8b0172a229d2cf5d87260e40
- https://git.kernel.org/stable/c/81831d56b723bc1090ce3158feddaca88e85f939
- https://git.kernel.org/stable/c/b024a8efee0f55d330a1cdd3eac8f79ac5acd3be
- https://git.kernel.org/stable/c/bd1ad63e11b2a568e98de536f319054d2de29f56