{"id":"CVE-2026-72276","title":"fbdev: metronomefb: fix potential memory leak in metronomefb_probe()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: metronomefb: fix potential memory leak in metronomefb_probe()\n\nThe memory allocated for pagerefs in fb_deferred_io_init() is not freed\non the error path. Fix it …","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 186b89659c4c67cccead52961eab0ca3b23951dc < 77e26383083c59a67244fcf2e70eecd354451906","Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < f779bd494f9521f89bfd4ce23953f3527341e9fd","Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < 01708cf3dca2f88eca26269521cbcc8e2f054ee4","Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < d54bb39cd34f44b32d5c4a8416fff8b01a9e76be","Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < 6854cf33dddb212bd7c3d69189623876e7334075","Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < a889978ec44fe33edb3fb7140dcbbb8e6465c1cb","Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < 894632b862a39b3fe1cb5de06fbae86225ea64de","Linux >= 5.15.149 < 5.15.212","Linux 5.19"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:54:14.068164Z"},"published":"2026-08-15","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:55:25.220Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-72276","references":[{"url":"https://git.kernel.org/stable/c/77e26383083c59a67244fcf2e70eecd354451906"},{"url":"https://git.kernel.org/stable/c/f779bd494f9521f89bfd4ce23953f3527341e9fd"},{"url":"https://git.kernel.org/stable/c/01708cf3dca2f88eca26269521cbcc8e2f054ee4"},{"url":"https://git.kernel.org/stable/c/d54bb39cd34f44b32d5c4a8416fff8b01a9e76be"},{"url":"https://git.kernel.org/stable/c/6854cf33dddb212bd7c3d69189623876e7334075"},{"url":"https://git.kernel.org/stable/c/a889978ec44fe33edb3fb7140dcbbb8e6465c1cb"},{"url":"https://git.kernel.org/stable/c/894632b862a39b3fe1cb5de06fbae86225ea64de"}],"tags":["cve.org"],"epss":0.00215,"epssPercentile":0.11902,"ingestedAt":"2026-11-06T18:00:12.581Z","slug":"CVE-2026-72276","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: metronomefb: fix potential memory leak in metronomefb_probe()\n\nThe memory allocated for pagerefs in fb_deferred_io_init() is not freed\non the error path. Fix it by calling fb_deferred_io_cleanup().\n\n## Affected\n\n- `Linux >= 186b89659c4c67cccead52961eab0ca3b23951dc < 77e26383083c59a67244fcf2e70eecd354451906`\n- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < f779bd494f9521f89bfd4ce23953f3527341e9fd`\n- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < 01708cf3dca2f88eca26269521cbcc8e2f054ee4`\n- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < d54bb39cd34f44b32d5c4a8416fff8b01a9e76be`\n- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < 6854cf33dddb212bd7c3d69189623876e7334075`\n- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < a889978ec44fe33edb3fb7140dcbbb8e6465c1cb`\n- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < 894632b862a39b3fe1cb5de06fbae86225ea64de`\n- `Linux >= 5.15.149 < 5.15.212`\n- `Linux 5.19`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}