CVE-2026-72273
Description
In the Linux kernel, the following vulnerability has been resolved: fbdev: efifb: fix memory leak in efifb_probe() Since commit 73ce73c30ba9 ("fbdev: Transfer video= option strings to caller; clarify ownership") the string returned from fb_get_options() is expected to be freed by the caller, but the string is not freed in efifb_probe(). Fix that by freeing the option string after setup.
How to fix
- Linux Linuxfafb2e08741b20027cee77918816de29a32d6fd6, 475383daf5f855f5b2c3a9aa801f69b69a81799e, febb5b4f67ace78d6b6862cc3c853b64710afb6c, 5276e3f75ddb51f980a8903f4b39e73cf42415e5, 9b6eaf101656958397a6012bf43f6e2e42c9e5cb or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 ≤ v < fafb2e08741b20027cee77918816de29a32d6fd6, 73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 ≤ v < 475383daf5f855f5b2c3a9aa801f69b69a81799e, 73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 ≤ v < febb5b4f67ace78d6b6862cc3c853b64710afb6c, 73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 ≤ v < 5276e3f75ddb51f980a8903f4b39e73cf42415e5, 73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 ≤ v < 9b6eaf101656958397a6012bf43f6e2e42c9e5cb, 6.4 | fafb2e08741b20027cee77918816de29a32d6fd6, 475383daf5f855f5b2c3a9aa801f69b69a81799e, febb5b4f67ace78d6b6862cc3c853b64710afb6c, 5276e3f75ddb51f980a8903f4b39e73cf42415e5, 9b6eaf101656958397a6012bf43f6e2e42c9e5cb |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.