https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 10:01:04 +0000 https://vulnerability.circl.lu/vuln/cve-2026-43264 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>fbdev: of: display_timing: fix refcount leak in of_get_display_timings()</p> <p>of_parse_phandle() returns a device_node with refcount incremented, which is stored in &#39;entry&#39; and then copied to &#39;native_mode&#39;. When the error paths at lines 184 or 192 jump to &#39;entryfail&#39;, native_mode&#39;s refcount is not decremented, causing a refcount leak.</p> <p>Fix this by changing the goto target from &#39;entryfail&#39; to &#39;timingfail&#39;, which properly calls of_node_put(native_mode) before cleanup.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>fbdev: of: display_timing: fix refcount leak in of_get_display_timings()</p> <p>of_parse_phandle() returns a device_node with refcount incremented, which is stored in &#39;entry&#39; and then copied to &#39;native_mode&#39;. When the error paths at lines 184 or 192 jump to &#39;entryfail&#39;, native_mode&#39;s refcount is not decremented, causing a refcount leak.</p> <p>Fix this by changing the goto target from &#39;entryfail&#39; to &#39;timingfail&#39;, which properly calls of_node_put(native_mode) before cleanup.</p> https://vulnerability.circl.lu/vuln/cve-2026-43264