What’s Vulnerable › Vulnerabilities

CVE-2026-45954: fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-27 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe() In au1200fb_drv_probe(), when platform_get_irq fails(), it directly returns from the function with an error code, which causes a memory leak. Replace it with a goto label to ensure proper cleanup.

Affected products

• Linux kernel: from 4.14.322 before 4.15; from 4.19.291 before 4.20; from 5.4.251 before 5.5; from 5.10.188 before 5.10.252; from 5.15.123 before 5.15.202; from 6.1.42 before 6.1.165 — fixed in 4.15, 4.20, 5.10.252, 5.15.202, 5.5, 6.1.165

How to fix

Upgrade to a fixed version: Linux kernel 4.15, 4.20, 5.10.252, 5.15.202. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/071d8fb757a8318f72c8e02898c2cf7e14e21fb6
• https://git.kernel.org/stable/c/3d4202ee6494c0d576cdc104b12e0834ca8136a8
• https://git.kernel.org/stable/c/3e5349e54113e2dce1a659c57935e18032742e56
• https://git.kernel.org/stable/c/762a26818934241b8b0172a229d2cf5d87260e40
• https://git.kernel.org/stable/c/81831d56b723bc1090ce3158feddaca88e85f939
• https://git.kernel.org/stable/c/b024a8efee0f55d330a1cdd3eac8f79ac5acd3be
• https://git.kernel.org/stable/c/bd1ad63e11b2a568e98de536f319054d2de29f56
• https://git.kernel.org/stable/c/ce4e25198a6aaaaf36248edf8daf3d744ec8e309

Get alerted when CVE-2026-45954 or the next vulnerability affects your stack