CVE-2026-74352of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails The global pointer 'reserved_mem' continues to reference the reserved_mem_array which lives in __initdata if alloc_reserved_mem_array() fails. of_reserved_mem_lookup() is exported for post-init use, that would dereference freed memory and trigger a use-after-free. So reset reserved_mem_count to 0 when alloc_reserved_mem_array() fails.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from b6ae53301eb41f0f59f83c161248b186bca7da70 before 6d28e6ad3c5c9248577f21057baa9bf16fa9ef3b; from 00c9a452a235c61f099504783badd9a7675ff5a5 before 9af58d10d0d8c08b822de5fc99e61f31a87ede8d; from 00c9a452a235c61f099504783badd9a7675ff5a5 before cbd3102fe27bc87da244bf4c3ba670ea4698b0a8; from 00c9a452a235c61f099504783badd9a7675ff5a5 before e1686ca81dbf3edbde589b7daf312b45cbf76e03 | CNA record |
References
- https://git.kernel.org/stable/c/6d28e6ad3c5c9248577f21057baa9bf16fa9ef3b
- https://git.kernel.org/stable/c/9af58d10d0d8c08b822de5fc99e61f31a87ede8d
- https://git.kernel.org/stable/c/cbd3102fe27bc87da244bf4c3ba670ea4698b0a8
- https://git.kernel.org/stable/c/e1686ca81dbf3edbde589b7daf312b45cbf76e03
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.