{"id":"CVE-2026-72274","title":"fbdev: hecubafb: fix potential memory leak in hecubafb_probe()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: hecubafb: fix potential memory leak in hecubafb_probe()\n\nThe memory allocated for pagerefs in fb_deferred_io_init() is not freed\non the error path. Fix it by cal…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 186b89659c4c67cccead52961eab0ca3b23951dc < 3eb2bc1009c2476426ffbaf642d7ac82f4685b4d","Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < 7de72f7534d961b117e0b051fa8798975036f5f3","Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < 2952767e399e2796d45644ea50f442988d2bb02d","Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < 612ea3a8e525580aa82f26ab873e285f5caf9d99","Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < d684ce2db92b1093bcca2b42e5160a5fe23eb496","Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < 9a94b85531852eb86283eca36ab041782c6b3518","Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < cbef2a305a8a72969b86f96b7c07b86edde61aff","Linux >= 5.15.149 < 5.15.212","Linux 5.19"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:53:56.542379Z"},"published":"2026-08-15","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:55:24.796Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-72274","references":[{"url":"https://git.kernel.org/stable/c/3eb2bc1009c2476426ffbaf642d7ac82f4685b4d"},{"url":"https://git.kernel.org/stable/c/7de72f7534d961b117e0b051fa8798975036f5f3"},{"url":"https://git.kernel.org/stable/c/2952767e399e2796d45644ea50f442988d2bb02d"},{"url":"https://git.kernel.org/stable/c/612ea3a8e525580aa82f26ab873e285f5caf9d99"},{"url":"https://git.kernel.org/stable/c/d684ce2db92b1093bcca2b42e5160a5fe23eb496"},{"url":"https://git.kernel.org/stable/c/9a94b85531852eb86283eca36ab041782c6b3518"},{"url":"https://git.kernel.org/stable/c/cbef2a305a8a72969b86f96b7c07b86edde61aff"}],"tags":["cve.org"],"epss":0.00215,"epssPercentile":0.1191,"ingestedAt":"2026-11-06T18:00:12.582Z","slug":"CVE-2026-72274","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: hecubafb: fix potential memory leak in hecubafb_probe()\n\nThe memory allocated for pagerefs in fb_deferred_io_init() is not freed\non the error path. Fix it by calling fb_deferred_io_cleanup().\n\n## Affected\n\n- `Linux >= 186b89659c4c67cccead52961eab0ca3b23951dc < 3eb2bc1009c2476426ffbaf642d7ac82f4685b4d`\n- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < 7de72f7534d961b117e0b051fa8798975036f5f3`\n- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < 2952767e399e2796d45644ea50f442988d2bb02d`\n- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < 612ea3a8e525580aa82f26ab873e285f5caf9d99`\n- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < d684ce2db92b1093bcca2b42e5160a5fe23eb496`\n- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < 9a94b85531852eb86283eca36ab041782c6b3518`\n- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < cbef2a305a8a72969b86f96b7c07b86edde61aff`\n- `Linux >= 5.15.149 < 5.15.212`\n- `Linux 5.19`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}