CVE-2026-72274

Not scored yetLast modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

fbdev: hecubafb: fix potential memory leak in hecubafb_probe()

The memory allocated for pagerefs in fb_deferred_io_init() is not freed on the error path. Fix it by calling fb_deferred_io_cleanup().

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 186b89659c4c67cccead52961eab0ca3b23951dc, < 3eb2bc1009c2476426ffbaf642d7ac82f4685b4d; >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31, < 7de72f7534d961b117e0b051fa8798975036f5f3; >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31, < 2952767e399e2796d45644ea50f442988d2bb02d; >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31, < 612ea3a8e525580aa82f26ab873e285f5caf9d99; >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31, < d684ce2db92b1093bcca2b42e5160a5fe23eb496; >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31, < 9a94b85531852eb86283eca36ab041782c6b3518; >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31, < cbef2a305a8a72969b86f96b7c07b86edde61aff; >= 5.15.149, < 5.15.212
LinuxLinux5.19

References

Timeline

Published
Aug 15, 2026
Last modified
Nov 6, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-72275In the Linux kernel, the following vulnerability has been resolved: fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe() CVE-2026-72276In the Linux kernel, the following vulnerability has been resolved: fbdev: metronomefb: fix potential memory leak in metronomefb_probe() TCVE-2026-722779.3In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory When consCVE-2026-722789.3In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Re-translate VNCR before injecting abort KVM faults inCVE-2026-722799.0In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCR KVM currentCVE-2026-72287.3A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is the function get_cart_count of the file /adminCVE-2026-722807.1In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Drop bogus WARN for write to ZCR_EL2 It is entirely poCVE-2026-72281In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: account pKVM reclaim against the VM mm Protected guest fauCVE-2026-722827.8In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers kvmCVE-2026-722838.8In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Nullify irqfd->producer if updating IRTE for bypass fails NuCVE-2026-722847.1In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs CVE-2026-722857.8In the Linux kernel, the following vulnerability has been resolved: KVM: TDX: Reject concurrent change to CPUID entry count Reject KVM_TDX