CVE-2026-72275fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe() The memory allocated for pagerefs in fb_deferred_io_init() is not freed on the error path. Fix it by calling fb_deferred_io_cleanup().
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 186b89659c4c67cccead52961eab0ca3b23951dc before edc5a845108337d0c167ab850fe9adfaea442975; 56c134f7f1b58be08bdb0ca8372474a4a5165f31 builds before 54a4cd11702d5e8bcefc3b514e338955813993a1; 56c134f7f1b58be08bdb0ca8372474a4a5165f31 builds before 4ce94f9e3bfb37866638e4b81e2c3d8f7470a12c; 56c134f7f1b58be08bdb0ca8372474a4a5165f31 builds before 07d2f9cb667c2f6331a483227c62d0a4a91ef42f; from 56c134f7f1b58be08bdb0ca8372474a4a5165f31 before e8c9aae8c950869f65af8b9dd2f71f861ea6e433; from 56c134f7f1b58be08bdb0ca8372474a4a5165f31 before e818c397548cde68d64c6abf8be0a5f3e3eef7d1; 56c134f7f1b58be08bdb0ca8372474a4a5165f31 builds before 9d18a4e4234fd3ee0d0eed8ccbbb50cb76b2232c; from 5.15.149 before 5.15.212 | CNA record |
References
- https://git.kernel.org/stable/c/edc5a845108337d0c167ab850fe9adfaea442975
- https://git.kernel.org/stable/c/54a4cd11702d5e8bcefc3b514e338955813993a1
- https://git.kernel.org/stable/c/4ce94f9e3bfb37866638e4b81e2c3d8f7470a12c
- https://git.kernel.org/stable/c/07d2f9cb667c2f6331a483227c62d0a4a91ef42f
- https://git.kernel.org/stable/c/e8c9aae8c950869f65af8b9dd2f71f861ea6e433
- https://git.kernel.org/stable/c/e818c397548cde68d64c6abf8be0a5f3e3eef7d1
- https://git.kernel.org/stable/c/9d18a4e4234fd3ee0d0eed8ccbbb50cb76b2232c
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.