CVE Explorer

CVE-2026-43264

In the Linux kernel, the following vulnerability has been resolved: fbdev: of: display_timing: fix refcount leak in of_get_display_timings() of_parse_phandle() returns a device_node with refcount incremented, which is stored in 'entry' and then copied to 'native_mode'. When the error paths at lines 184 or 192 jump to 'entryfail', native_mode's refcount is not decremented, causing a refcount leak. Fix this by changing the goto target from 'entryfail' to 'timingfail', which properly calls of_no

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:53a1b16b6807571a207332557caf97bb9e1da63eb2cf32e1531a1a227723f95c

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/video/of_display_timing.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.9"},{"lessThan":"3.9","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.252","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.202","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.165","versionType":"semver"}…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:20f54f94c20a9dac1c8e99a37b05aa8b7849d1bdca315897d562a295e9427036 · sha256:b99493a05a7680b3… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/video/of_display_timing.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"20881ad42e651c69d89eb38a2042838187900fd6","status":"affected","version":"cc3f414cf2e404130584b63d373161ba6fd24bc2","versionType":"git"},{"lessThan":"b5bdcc5afbff845834d04d651773cb6b47db5dd3","status":"affected","version":"cc3f414cf2e404130584b63d373161ba6fd24bc2","versionType":"git"},{"lessThan":"2b22e4fe1273c24f405ed7903349c4bbd82b6368","status":"affected","version":"cc3f414cf2e4…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:20f54f94c20a9dac1c8e99a37b05aa8b7849d1bdca315897d562a295e9427036 · sha256:b99493a05a7680b3… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:20f54f94c20a9dac1c8e99a37b05aa8b7849d1bdca315897d562a295e9427036 · sha256:b99493a05a7680b3… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:20f54f94c20a9dac1c8e99a37b05aa8b7849d1bdca315897d562a295e9427036 · sha256:b99493a05a7680b3… · /containers/cna/affected/0

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/20881ad42e651c69d89eb38a2042838187900fd6"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:20f54f94c20a9dac1c8e99a37b05aa8b7849d1bdca315897d562a295e9427036 · sha256:b99493a05a7680b3… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/2b22e4fe1273c24f405ed7903349c4bbd82b6368"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:20f54f94c20a9dac1c8e99a37b05aa8b7849d1bdca315897d562a295e9427036 · sha256:b99493a05a7680b3… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/3ed019654234edb8625c05d05e15d40f74e64f70"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:20f54f94c20a9dac1c8e99a37b05aa8b7849d1bdca315897d562a295e9427036 · sha256:b99493a05a7680b3… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/69290f2d3999c5fa1a7f5d5593cfc5461fa3ee64"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:20f54f94c20a9dac1c8e99a37b05aa8b7849d1bdca315897d562a295e9427036 · sha256:b99493a05a7680b3… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/b5bdcc5afbff845834d04d651773cb6b47db5dd3"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:20f54f94c20a9dac1c8e99a37b05aa8b7849d1bdca315897d562a295e9427036 · sha256:b99493a05a7680b3… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/c5734f9030a8b1e13868d1641b5163d8e659306e"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:20f54f94c20a9dac1c8e99a37b05aa8b7849d1bdca315897d562a295e9427036 · sha256:b99493a05a7680b3… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/d6f34bbff07476c6abb8672c89d217824871c5ed"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:20f54f94c20a9dac1c8e99a37b05aa8b7849d1bdca315897d562a295e9427036 · sha256:b99493a05a7680b3… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/eacf9840ae1285a1ef47eb0ce16d786e542bd4d7"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:20f54f94c20a9dac1c8e99a37b05aa8b7849d1bdca315897d562a295e9427036 · sha256:b99493a05a7680b3… · /containers/cna/references/7

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer