CVE-2026-45954

fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe()

MEDIUM
5.5
CVSS Score
Published: May 27, 2026 at 12:18 PM UTC
Updated: June 17, 2026 at 10:52 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe() In au1200fb_drv_probe(), when platform_get_irq fails(), it directly returns from the function with an error code, which causes a memory leak. Replace it with a goto label to ensure proper cleanup.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v ≥ 4.14.322v ≥ 4.19.291v ≥ 5.4.251v ≥ 6.4.74.14.322 ≤ v < 4.154.19.291 ≤ v < 4.205.10.188 ≤ v < 5.10.2525.15.123 ≤ v < 5.15.2025.4.251 ≤ v < 5.56.1.42 ≤ v < 6.1.1656.13 ≤ v < 6.18.146.19 ≤ v < 6.19.46.4.7 ≤ v < 6.56.5 ≤ v < 6.12.756.5 ≤ v < 6.18.146.5 ≤ v < 6.19.46.5 ≤ v < 6.6.1286.5 ≤ v < 7.06.5.1 ≤ v < 6.6.1286.7 ≤ v < 6.12.752400ae8fd86d0dfb67bdff6e206b090b0606bbf44.14.3224.19.29149e435ca02c797e6e877bb79a9c3c3f580462fdb4e88761f5f8c7869f15a2046b1a1116f4fab4ac85.10.1885.15.1235.4.25150e4b32d2e58b7487ebb0a16d5de9cbde56f79495cf4447039ef335768a6e61208ff2eebf1884f536.1.426.4.76.56.5 rc36.5 rc46.5 rc56.5 rc66.5 rc79386ddd88480a1b838c92ef1677a4768c8914505b07e31824df61c8866ab549a49e35826ea42609cb492d371c6225d95f8ee34cac0eb40b58f5c5023
Vendor states this is fixed in 071d8fb757a8318f72c8e02898c2cf7e14e21fb6 (fixed)
Vendor states this is fixed in 3d4202ee6494c0d576cdc104b12e0834ca8136a8 (fixed)
Vendor states this is fixed in 3e5349e54113e2dce1a659c57935e18032742e56 (fixed)
Vendor states this is fixed in 762a26818934241b8b0172a229d2cf5d87260e40 (fixed)
Vendor states this is fixed in 81831d56b723bc1090ce3158feddaca88e85f939 (fixed)
Vendor states this is fixed in b024a8efee0f55d330a1cdd3eac8f79ac5acd3be (fixed)
Vendor states this is fixed in bd1ad63e11b2a568e98de536f319054d2de29f56 (fixed)
Vendor states this is fixed in ce4e25198a6aaaaf36248edf8daf3d744ec8e309 (fixed)
Affected range stops below 4.15, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.20, so it looks safe — our inference, not a vendor statement
Vendor states this is fixed in 5.10.252 (unaffected)
Vendor states this is fixed in 5.15.202 (unaffected)
Affected range stops below 5.5, so it looks safe — our inference, not a vendor statement
Vendor states this is fixed in 6.1.165 (unaffected)
Vendor states this is fixed in 6.12.75 (unaffected)
Vendor states this is fixed in 6.18.14 (unaffected)
Vendor states this is fixed in 6.19.4 (unaffected)
Vendor states this is fixed in 6.5 (unaffected)
Vendor states this is fixed in 6.6.128 (unaffected)
Vendor states this is fixed in 7.0 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-401

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card