{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"3eb2bc1009c2476426ffbaf642d7ac82f4685b4d","status":"affected","version":"186b89659c4c67cccead52961eab0ca3b23951dc","versionType":"git"},{"lessThan":"7de72f7534d961b117e0b051fa8798975036f5f3","status":"affected","version":"56c134f7f1b58be08bdb0ca8372474a4a5165f31","versionType":"git"},{"lessThan":"2952767e399e2796d45644ea50f442988d2bb02d","status":"affected","version":"56c134f7f1b58be08bdb0ca8372474a4a5165f31","versionType":"git"},{"lessThan":"612ea3a8e525580aa82f26ab873e285f5caf9d99","status":"affected","version":"56c134f7f1b58be08bdb0ca8372474a4a5165f31","versionType":"git"},{"lessThan":"d684ce2db92b1093bcca2b42e5160a5fe23eb496","status":"affected","version":"56c134f7f1b58be08bdb0ca8372474a4a5165f31","versionType":"git"},{"lessThan":"9a94b85531852eb86283eca36ab041782c6b3518","status":"affected","version":"56c134f7f1b58be08bdb0ca8372474a4a5165f31","versionType":"git"},{"lessThan":"cbef2a305a8a72969b86f96b7c07b86edde61aff","status":"affected","version":"56c134f7f1b58be08bdb0ca8372474a4a5165f31","versionType":"git"},{"lessThan":"5.15.212","status":"affected","version":"5.15.149","versionType":"semver"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"5.19"},{"lessThan":"5.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.145","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.97","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.40","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.5","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.2","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2026-72274","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: hecubafb: fix potential memory leak in hecubafb_probe()\n\nThe memory allocated for pagerefs in fb_deferred_io_init() is not freed\non the error path. Fix it by calling fb_deferred_io_cleanup().","epss":{"date":"2026-11-06","percentile":0.11896,"score":0.00215},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793985582003,"publishedAt":1786773297070,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/3eb2bc1009c2476426ffbaf642d7ac82f4685b4d"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/7de72f7534d961b117e0b051fa8798975036f5f3"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/2952767e399e2796d45644ea50f442988d2bb02d"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/612ea3a8e525580aa82f26ab873e285f5caf9d99"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/d684ce2db92b1093bcca2b42e5160a5fe23eb496"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/9a94b85531852eb86283eca36ab041782c6b3518"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/cbef2a305a8a72969b86f96b7c07b86edde61aff"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/2952767e399e2796d45644ea50f442988d2bb02d"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/3eb2bc1009c2476426ffbaf642d7ac82f4685b4d"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/612ea3a8e525580aa82f26ab873e285f5caf9d99"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/7de72f7534d961b117e0b051fa8798975036f5f3"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/9a94b85531852eb86283eca36ab041782c6b3518"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/cbef2a305a8a72969b86f96b7c07b86edde61aff"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/d684ce2db92b1093bcca2b42e5160a5fe23eb496"}],"remediation":[],"revision":"785450d3cb5531a75a260ef11f78db726997f340733807b79b22adbcb2ab6236","sources":[{"modifiedAt":1793984124796,"name":"CNA: Linux","retrievedAt":1793986083480,"url":"https://www.cve.org/CVERecord?id=CVE-2026-72274"},{"modifiedAt":1793985582003,"name":"NVD","retrievedAt":1793989705547,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72274"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793986127701,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-72274"}],"ssvc":{"assessedAt":1793984036542,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"fbdev: hecubafb: fix potential memory leak in hecubafb_probe()","updatedAt":1793989705547}