CVE-2026-72273

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: fbdev: efifb: fix memory leak in efifb_probe() Since commit 73ce73c30ba9 ("fbdev: Transfer video= option strings to caller; clarify ownership") the string returned from fb_get_options() is expected to be freed by the caller, but the string is not freed in efifb_probe(). Fix that by freeing the option string after setup.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedAug 15, 2026
First seenAug 15, 2026

How to fix

Update
  • Linux Linuxfafb2e08741b20027cee77918816de29a32d6fd6, 475383daf5f855f5b2c3a9aa801f69b69a81799e, febb5b4f67ace78d6b6862cc3c853b64710afb6c, 5276e3f75ddb51f980a8903f4b39e73cf42415e5, 9b6eaf101656958397a6012bf43f6e2e42c9e5cb or later

Affected products

ProductAffected versionsFixed in
Linux Linux73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 ≤ v < fafb2e08741b20027cee77918816de29a32d6fd6, 73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 ≤ v < 475383daf5f855f5b2c3a9aa801f69b69a81799e, 73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 ≤ v < febb5b4f67ace78d6b6862cc3c853b64710afb6c, 73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 ≤ v < 5276e3f75ddb51f980a8903f4b39e73cf42415e5, 73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 ≤ v < 9b6eaf101656958397a6012bf43f6e2e42c9e5cb, 6.4fafb2e08741b20027cee77918816de29a32d6fd6, 475383daf5f855f5b2c3a9aa801f69b69a81799e, febb5b4f67ace78d6b6862cc3c853b64710afb6c, 5276e3f75ddb51f980a8903f4b39e73cf42415e5, 9b6eaf101656958397a6012bf43f6e2e42c9e5cb

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.