CVE-2026-43264
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2026-05-06
Modified: 2026-11-06
First seen: 2026-11-06
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: fbdev: of: display_timing: fix refcount leak in of_get_display_timings() of_parse_phandle() returns a device_node with refcount incremented, which is stored in 'entry' and then copied to 'native_mode'. When the error paths at lines 184 or 192 jump to 'entryfail', native_mode's refcount is not decremented, causing a refcount leak. Fix this by changing the goto target from 'entryfail' to 'timingfail', which properly calls of_node_put(native_mode) before cleanup.
Affected Software (10)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | cc3f414cf2e404130584b63d373161ba6fd24bc2 < 20881ad42e651c69d89eb38a2042838187900fd6 |
| Linux | Linux | cc3f414cf2e404130584b63d373161ba6fd24bc2 < b5bdcc5afbff845834d04d651773cb6b47db5dd3 |
| Linux | Linux | cc3f414cf2e404130584b63d373161ba6fd24bc2 < 2b22e4fe1273c24f405ed7903349c4bbd82b6368 |
| Linux | Linux | cc3f414cf2e404130584b63d373161ba6fd24bc2 < 3ed019654234edb8625c05d05e15d40f74e64f70 |
| Linux | Linux | cc3f414cf2e404130584b63d373161ba6fd24bc2 < d6f34bbff07476c6abb8672c89d217824871c5ed |
| Linux | Linux | cc3f414cf2e404130584b63d373161ba6fd24bc2 < 69290f2d3999c5fa1a7f5d5593cfc5461fa3ee64 |
| Linux | Linux | cc3f414cf2e404130584b63d373161ba6fd24bc2 < c5734f9030a8b1e13868d1641b5163d8e659306e |
| Linux | Linux | cc3f414cf2e404130584b63d373161ba6fd24bc2 < eacf9840ae1285a1ef47eb0ce16d786e542bd4d7 |
| Linux | Linux | 3.9 |
| linux | linux_kernel | 3.9 – 5.10.252 |