CVE-2026-72276: fbdev: metronomefb: fix potential memory leak in metronomefb_probe()

Published Aug 15, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

fbdev: metronomefb: fix potential memory leak in metronomefbprobe()

The memory allocated for pagerefs in fbdeferredioinit() is not freed on the error path. Fix it by calling fbdeferrediocleanup().

Event History

Aug 15, 2026

CVE Published

via MITRE·05:54 AM

Data Sourced

via MITRE·05:54 AM

Description

CVE-2026-72276 has a severity rating of 10, indicating a critical risk.

To fix CVE-2026-72276, ensure that the memory allocated for pagerefs is properly released by calling fb_deferred_io_cleanup() on error paths.

CVE-2026-72276 affects the fbdev component of the Linux kernel, specifically the metronomefb driver.

CVE-2026-72276 was published on August 15, 2026.

CVE-2026-72276 is a memory leak vulnerability that occurs during the initialization of the metronomefb driver.