-

CVE-2026-74352

of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails

In the Linux kernel, the following vulnerability has been resolved:

of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails

The global pointer 'reserved_mem' continues to reference the
reserved_mem_array which lives in __initdata if
alloc_reserved_mem_array() fails. of_reserved_mem_lookup() is
exported for post-init use, that would dereference freed memory
and trigger a use-after-free.

So reset reserved_mem_count to 0 when alloc_reserved_mem_array()
fails.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version b6ae53301eb41f0f59f83c161248b186bca7da70
Version < 6d28e6ad3c5c9248577f21057baa9bf16fa9ef3b
Status affected
Version 00c9a452a235c61f099504783badd9a7675ff5a5
Version < 9af58d10d0d8c08b822de5fc99e61f31a87ede8d
Status affected
Version 00c9a452a235c61f099504783badd9a7675ff5a5
Version < cbd3102fe27bc87da244bf4c3ba670ea4698b0a8
Status affected
Version 00c9a452a235c61f099504783badd9a7675ff5a5
Version < e1686ca81dbf3edbde589b7daf312b45cbf76e03
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 6.13
Status affected
Version 0
Version < 6.13
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.065
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/6d28e6ad3c5c9248577f21057baa9bf16fa9ef3b
https://git.kernel.org/stable/c/9af58d10d0d8c08b822de5fc99e61f31a87ede8d
https://git.kernel.org/stable/c/cbd3102fe27bc87da244bf4c3ba670ea4698b0a8
https://git.kernel.org/stable/c/e1686ca81dbf3edbde589b7daf312b45cbf76e03