CVE-2026-72273

fbdev: efifb: fix memory leak in efifb_probe()

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Aug 17, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

fbdev: efifb: fix memory leak in efifb_probe()

Since commit 73ce73c30ba9 ("fbdev: Transfer video= option strings to caller; clarify ownership") the string returned from fb_get_options() is expected to be freed by the caller, but the string is not freed in efifb_probe(). Fix that by freeing the option string after setup.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 to before fafb2e08741b20027cee77918816de29a32d6fd6Affected 73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 to before 475383daf5f855f5b2c3a9aa801f69b69a81799eAffected 73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 to before febb5b4f67ace78d6b6862cc3c853b64710afb6cAffected 73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 to before 5276e3f75ddb51f980a8903f4b39e73cf42415e5Affected 73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 to before 9b6eaf101656958397a6012bf43f6e2e42c9e5cbAffected
LinuxLinux	6.4Affected before 6.4Not affected 6.6.148 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 to before fafb2e08741b20027cee77918816de29a32d6fd6Affected
73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 to before 475383daf5f855f5b2c3a9aa801f69b69a81799eAffected
73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 to before febb5b4f67ace78d6b6862cc3c853b64710afb6cAffected
73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 to before 5276e3f75ddb51f980a8903f4b39e73cf42415e5Affected
73ce73c30ba9ae4d90fdfad7ebe9104001d5d851 to before 9b6eaf101656958397a6012bf43f6e2e42c9e5cbAffected

LinuxLinux

6.4Affected
before 6.4Not affected
6.6.148 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.