---
id: CVE-2026-72275
title: 'fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe()

  The memory allocated for pagerefs in fb_deferred_io_init() is not freed
  on the error path. Fix i…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 186b89659c4c67cccead52961eab0ca3b23951dc <
    edc5a845108337d0c167ab850fe9adfaea442975
  - >-
    Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 <
    54a4cd11702d5e8bcefc3b514e338955813993a1
  - >-
    Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 <
    4ce94f9e3bfb37866638e4b81e2c3d8f7470a12c
  - >-
    Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 <
    07d2f9cb667c2f6331a483227c62d0a4a91ef42f
  - >-
    Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 <
    e8c9aae8c950869f65af8b9dd2f71f861ea6e433
  - >-
    Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 <
    e818c397548cde68d64c6abf8be0a5f3e3eef7d1
  - >-
    Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 <
    9d18a4e4234fd3ee0d0eed8ccbbb50cb76b2232c
  - Linux >= 5.15.149 < 5.15.212
  - Linux 5.19
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:54:03.216701Z'
published: '2026-08-15'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:55:25.023Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-72275'
references:
  - url: 'https://git.kernel.org/stable/c/edc5a845108337d0c167ab850fe9adfaea442975'
  - url: 'https://git.kernel.org/stable/c/54a4cd11702d5e8bcefc3b514e338955813993a1'
  - url: 'https://git.kernel.org/stable/c/4ce94f9e3bfb37866638e4b81e2c3d8f7470a12c'
  - url: 'https://git.kernel.org/stable/c/07d2f9cb667c2f6331a483227c62d0a4a91ef42f'
  - url: 'https://git.kernel.org/stable/c/e8c9aae8c950869f65af8b9dd2f71f861ea6e433'
  - url: 'https://git.kernel.org/stable/c/e818c397548cde68d64c6abf8be0a5f3e3eef7d1'
  - url: 'https://git.kernel.org/stable/c/9d18a4e4234fd3ee0d0eed8ccbbb50cb76b2232c'
tags:
  - cve.org
epss: 0.00215
epssPercentile: 0.11902
ingestedAt: '2026-11-06T18:00:12.583Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe()

The memory allocated for pagerefs in fb_deferred_io_init() is not freed
on the error path. Fix it by calling fb_deferred_io_cleanup().

## Affected

- `Linux >= 186b89659c4c67cccead52961eab0ca3b23951dc < edc5a845108337d0c167ab850fe9adfaea442975`
- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < 54a4cd11702d5e8bcefc3b514e338955813993a1`
- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < 4ce94f9e3bfb37866638e4b81e2c3d8f7470a12c`
- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < 07d2f9cb667c2f6331a483227c62d0a4a91ef42f`
- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < e8c9aae8c950869f65af8b9dd2f71f861ea6e433`
- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < e818c397548cde68d64c6abf8be0a5f3e3eef7d1`
- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < 9d18a4e4234fd3ee0d0eed8ccbbb50cb76b2232c`
- `Linux >= 5.15.149 < 5.15.212`
- `Linux 5.19`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.