In the Linux kernel, the following vulnerability has been resolved:
fbdev: of: displaytiming: fix refcount leak in ofgetdisplaytimings()
ofparsephandle() returns a devicenode with refcount incremented, which is stored in 'entry' and then copied to 'nativemode'. When the error paths at lines 184 or 192 jump to 'entryfail', native_mode's refcount is not decremented, causing a refcount leak.
Fix this by changing the goto target from 'entryfail' to 'timingfail', which properly calls ofnodeput(native_mode) before cleanup.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43264.json"
}