CVE-2026-72275: fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe()

CVE-2026-72275: fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe()

[Greg Kroah-Hartman]

From: Greg Kroah-Hartman <gregkh@kernel.org>

Description
===========

In the Linux kernel, the following vulnerability has been resolved:

fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe()

The memory allocated for pagerefs in fb_deferred_io_init() is not freed
on the error path. Fix it by calling fb_deferred_io_cleanup().

The Linux kernel CVE team has assigned CVE-2026-72275 to this issue.


Affected and fixed versions
===========================

	Issue introduced in 5.15.149 with commit 186b89659c4c67cccead52961eab0ca3b23951dc and fixed in 5.15.212 with commit edc5a845108337d0c167ab850fe9adfaea442975
	Issue introduced in 5.19 with commit 56c134f7f1b58be08bdb0ca8372474a4a5165f31 and fixed in 6.1.178 with commit 54a4cd11702d5e8bcefc3b514e338955813993a1
	Issue introduced in 5.19 with commit 56c134f7f1b58be08bdb0ca8372474a4a5165f31 and fixed in 6.6.145 with commit 4ce94f9e3bfb37866638e4b81e2c3d8f7470a12c
	Issue introduced in 5.19 with commit 56c134f7f1b58be08bdb0ca8372474a4a5165f31 and fixed in 6.12.97 with commit 07d2f9cb667c2f6331a483227c62d0a4a91ef42f
	Issue introduced in 5.19 with commit 56c134f7f1b58be08bdb0ca8372474a4a5165f31 and fixed in 6.18.40 with commit e8c9aae8c950869f65af8b9dd2f71f861ea6e433
	Issue introduced in 5.19 with commit 56c134f7f1b58be08bdb0ca8372474a4a5165f31 and fixed in 7.1.5 with commit e818c397548cde68d64c6abf8be0a5f3e3eef7d1
	Issue introduced in 5.19 with commit 56c134f7f1b58be08bdb0ca8372474a4a5165f31 and fixed in 7.2-rc1 with commit 9d18a4e4234fd3ee0d0eed8ccbbb50cb76b2232c

Please see https://www.kernel.org for a full list of currently supported
kernel versions by the kernel community.

Unaffected versions might change over time as fixes are backported to
older supported kernel versions.  The official CVE entry at
	https://cve.org/CVERecord/?id=CVE-2026-72275
will be updated if fixes are backported, please check that for the most
up to date information about this issue.


Affected files
==============

The file(s) affected by this issue are:
	drivers/video/fbdev/broadsheetfb.c


Mitigation
==========

The Linux kernel CVE team recommends that you update to the latest
stable kernel version for this, and many other bugfixes.  Individual
changes are never tested alone, but rather are part of a larger kernel
release.  Cherry-picking individual commits is not recommended or
supported by the Linux kernel community at all.  If however, updating to
the latest release is impossible, the individual changes to resolve this
issue can be found at these commits:
	https://git.kernel.org/stable/c/edc5a845108337d0c167ab850fe9adfaea442975
	https://git.kernel.org/stable/c/54a4cd11702d5e8bcefc3b514e338955813993a1
	https://git.kernel.org/stable/c/4ce94f9e3bfb37866638e4b81e2c3d8f7470a12c
	https://git.kernel.org/stable/c/07d2f9cb667c2f6331a483227c62d0a4a91ef42f
	https://git.kernel.org/stable/c/e8c9aae8c950869f65af8b9dd2f71f861ea6e433
	https://git.kernel.org/stable/c/e818c397548cde68d64c6abf8be0a5f3e3eef7d1
	https://git.kernel.org/stable/c/9d18a4e4234fd3ee0d0eed8ccbbb50cb76b2232c