---
id: CVE-2026-72276
title: 'fbdev: metronomefb: fix potential memory leak in metronomefb_probe()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  fbdev: metronomefb: fix potential memory leak in metronomefb_probe()

  The memory allocated for pagerefs in fb_deferred_io_init() is not freed
  on the error path. Fix it …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 186b89659c4c67cccead52961eab0ca3b23951dc <
    77e26383083c59a67244fcf2e70eecd354451906
  - >-
    Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 <
    f779bd494f9521f89bfd4ce23953f3527341e9fd
  - >-
    Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 <
    01708cf3dca2f88eca26269521cbcc8e2f054ee4
  - >-
    Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 <
    d54bb39cd34f44b32d5c4a8416fff8b01a9e76be
  - >-
    Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 <
    6854cf33dddb212bd7c3d69189623876e7334075
  - >-
    Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 <
    a889978ec44fe33edb3fb7140dcbbb8e6465c1cb
  - >-
    Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 <
    894632b862a39b3fe1cb5de06fbae86225ea64de
  - Linux >= 5.15.149 < 5.15.212
  - Linux 5.19
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:54:14.068164Z'
published: '2026-08-15'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:55:25.220Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-72276'
references:
  - url: 'https://git.kernel.org/stable/c/77e26383083c59a67244fcf2e70eecd354451906'
  - url: 'https://git.kernel.org/stable/c/f779bd494f9521f89bfd4ce23953f3527341e9fd'
  - url: 'https://git.kernel.org/stable/c/01708cf3dca2f88eca26269521cbcc8e2f054ee4'
  - url: 'https://git.kernel.org/stable/c/d54bb39cd34f44b32d5c4a8416fff8b01a9e76be'
  - url: 'https://git.kernel.org/stable/c/6854cf33dddb212bd7c3d69189623876e7334075'
  - url: 'https://git.kernel.org/stable/c/a889978ec44fe33edb3fb7140dcbbb8e6465c1cb'
  - url: 'https://git.kernel.org/stable/c/894632b862a39b3fe1cb5de06fbae86225ea64de'
tags:
  - cve.org
epss: 0.00215
epssPercentile: 0.11902
ingestedAt: '2026-11-06T18:00:12.581Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

fbdev: metronomefb: fix potential memory leak in metronomefb_probe()

The memory allocated for pagerefs in fb_deferred_io_init() is not freed
on the error path. Fix it by calling fb_deferred_io_cleanup().

## Affected

- `Linux >= 186b89659c4c67cccead52961eab0ca3b23951dc < 77e26383083c59a67244fcf2e70eecd354451906`
- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < f779bd494f9521f89bfd4ce23953f3527341e9fd`
- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < 01708cf3dca2f88eca26269521cbcc8e2f054ee4`
- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < d54bb39cd34f44b32d5c4a8416fff8b01a9e76be`
- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < 6854cf33dddb212bd7c3d69189623876e7334075`
- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < a889978ec44fe33edb3fb7140dcbbb8e6465c1cb`
- `Linux >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < 894632b862a39b3fe1cb5de06fbae86225ea64de`
- `Linux >= 5.15.149 < 5.15.212`
- `Linux 5.19`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.