---
id: CVE-2026-72274
title: 'fbdev: hecubafb: fix potential memory leak in hecubafb_probe()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  fbdev: hecubafb: fix potential memory leak in hecubafb_probe()

  The memory allocated for pagerefs in fb_deferred_io_init() is not freed
  on the error path. Fix it by cal…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 186b89659c4c67cccead52961eab0ca3b23951dc <
    3eb2bc1009c2476426ffbaf642d7ac82f4685b4d
  - >-
    Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 <
    7de72f7534d961b117e0b051fa8798975036f5f3
  - >-
    Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 <
    2952767e399e2796d45644ea50f442988d2bb02d
  - >-
    Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 <
    612ea3a8e525580aa82f26ab873e285f5caf9d99
  - >-
    Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 <
    d684ce2db92b1093bcca2b42e5160a5fe23eb496
  - >-
    Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 <
    9a94b85531852eb86283eca36ab041782c6b3518
  - >-
    Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 <
    cbef2a305a8a72969b86f96b7c07b86edde61aff
  - Linux >= 5.15.149 < 5.15.212
  - Linux 5.19
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:53:56.542379Z'
published: '2026-08-15'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:55:24.796Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-72274'
references:
  - url: 'https://git.kernel.org/stable/c/3eb2bc1009c2476426ffbaf642d7ac82f4685b4d'
  - url: 'https://git.kernel.org/stable/c/7de72f7534d961b117e0b051fa8798975036f5f3'
  - url: 'https://git.kernel.org/stable/c/2952767e399e2796d45644ea50f442988d2bb02d'
  - url: 'https://git.kernel.org/stable/c/612ea3a8e525580aa82f26ab873e285f5caf9d99'
  - url: 'https://git.kernel.org/stable/c/d684ce2db92b1093bcca2b42e5160a5fe23eb496'
  - url: 'https://git.kernel.org/stable/c/9a94b85531852eb86283eca36ab041782c6b3518'
  - url: 'https://git.kernel.org/stable/c/cbef2a305a8a72969b86f96b7c07b86edde61aff'
tags:
  - cve.org
epss: 0.00215
epssPercentile: 0.1191
ingestedAt: '2026-11-06T18:00:12.582Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

fbdev: hecubafb: fix potential memory leak in hecubafb_probe()

The memory allocated for pagerefs in fb_deferred_io_init() is not freed
on the error path. Fix it by calling fb_deferred_io_cleanup().

## Affected

- `Linux >= 186b89659c4c67cccead52961eab0ca3b23951dc < 3eb2bc1009c2476426ffbaf642d7ac82f4685b4d`
- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < 7de72f7534d961b117e0b051fa8798975036f5f3`
- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < 2952767e399e2796d45644ea50f442988d2bb02d`
- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < 612ea3a8e525580aa82f26ab873e285f5caf9d99`
- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < d684ce2db92b1093bcca2b42e5160a5fe23eb496`
- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < 9a94b85531852eb86283eca36ab041782c6b3518`
- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < cbef2a305a8a72969b86f96b7c07b86edde61aff`
- `Linux >= 5.15.149 < 5.15.212`
- `Linux 5.19`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.