CVE-2026-72274
Received Received - Intake

BaseFortify

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: fbdev: hecubafb: fix potential memory leak in hecubafb_probe() The memory allocated for pagerefs in fb_deferred_io_init() is not freed on the error path. Fix it by calling fb_deferred_io_cleanup().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72274
EUVD
EUVD-2026-59173

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a memory leak vulnerability in the Linux kernel's hecubafb framebuffer driver. When probing the device, memory is allocated for pagerefs but not freed if an error occurs during initialization. The fix involves calling fb_deferred_io_cleanup() to properly release the memory.

Detection Guidance

This vulnerability is specific to the Linux kernel's hecubafb driver and involves a memory leak in the framebuffer deferred I/O initialization. Detection requires checking kernel logs for errors related to hecubafb or framebuffer initialization. Commands like dmesg | grep hecubafb or journalctl -k | grep hecubafb may help identify issues.

Impact Analysis

The impact is limited to systems using the hecubafb framebuffer driver. If the driver fails to initialize, it could cause a memory leak, potentially leading to gradual system resource exhaustion over time. This may result in degraded performance or crashes in affected systems.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for CVE-2026-72274. Monitor kernel logs for hecubafb-related errors after applying updates. If the driver is not in use, consider disabling it via kernel module blacklisting.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72274. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart