In the Linux kernel, the following vulnerability has been resolved:
fbdev: fbcon: release buffer when fbcondoset_font() failed
syzbot is reporting memory leak at fbcondosetfont() [1], for commit a5a923038d70 ("fbdev: fbcon: Properly revert changes when vcresize() failed") missed that the buffer might be newly allocated by fbconsetfont().