CVE-2026-72274

fbdev: hecubafb: fix potential memory leak in hecubafb_probe()

N/A

Published: August 15, 2026 at 05:54 AM UTC

Updated: August 17, 2026 at 06:18 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: fbdev: hecubafb: fix potential memory leak in hecubafb_probe() The memory allocated for pagerefs in fb_deferred_io_init() is not freed on the error path. Fix it by calling fb_deferred_io_cleanup().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

5.15.149 ≤ v < 5.15.2125.19 ≤ v < 6.1.1785.19 ≤ v < 6.12.975.19 ≤ v < 6.18.405.19 ≤ v < 6.6.1455.19 ≤ v < 7.1.55.19 ≤ v < 7.2186b89659c4c67cccead52961eab0ca3b23951dc5.15.149 5.1956c134f7f1b58be08bdb0ca8372474a4a5165f31

Vendor states this is fixed in 2952767e399e2796d45644ea50f442988d2bb02d (fixed)

Vendor states this is fixed in 3eb2bc1009c2476426ffbaf642d7ac82f4685b4d (fixed)

Vendor states this is fixed in 612ea3a8e525580aa82f26ab873e285f5caf9d99 (fixed)

Vendor states this is fixed in 7de72f7534d961b117e0b051fa8798975036f5f3 (fixed)

Vendor states this is fixed in 9a94b85531852eb86283eca36ab041782c6b3518 (fixed)

Vendor states this is fixed in cbef2a305a8a72969b86f96b7c07b86edde61aff (fixed)

Vendor states this is fixed in d684ce2db92b1093bcca2b42e5160a5fe23eb496 (fixed)

Vendor states this is fixed in 5.15.212 (unaffected)

Vendor states this is fixed in 5.19 (unaffected)

Vendor states this is fixed in 6.1.178 (unaffected)

Vendor states this is fixed in 6.12.97 (unaffected)

Vendor states this is fixed in 6.18.40 (unaffected)