The tridentfb driver contains a CWE‑772 flaw: memory allocated for a modelist during device probing is not released on error, causing a potential memory leak. This can lead to a gradual uncontrolled use of memory, although the description does not mention a direct exploitation or denial‑of‑service vector.

All Linux kernels that incorporate the trident framebuffer driver before the patch commit 089d149 (and any subsequent updates) are vulnerable. No specific version numbers are provided, so any kernel built from the default sources prior to the fix is considered at risk. The affected component is the trident_pci_probe() function within the framebuffer driver.

The CVSS score is 5.5 and the EPSS score is less than 1 %. The vulnerability is not listed in the CISA KEV catalog. The weakness is confined to hardware driver initialization; therefore any exploitation would require local access to the machine or the insertion of a malicious PCI device. Based on the description, it is inferred that no remote exploitation path is documented, and no active exploits are known.