CVE-2026-74491of/address: Fix NULL bus dereference in of_pci_range_parser_one()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: of/address: Fix NULL bus dereference in of_pci_range_parser_one() The bus matching rework made of_match_bus() return NULL for nodes with ranges/dma-ranges but no local #address-cells. parser_init() stored that NULL bus, and the range iterator later dereferenced it. Reject such nodes in parser_init(), leaving an explicit empty iterator for callers that ignore the init return, and make of_dma_get_max_cpu_address() honour the init failure so a rejected node cannot clamp the DMA limit.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 64ee3cf096ac590e7da2ceac1c390546bff5e240 before 88752b811f72aa7a16de6dad4b25031d7308673e; from 64ee3cf096ac590e7da2ceac1c390546bff5e240 before eddd0159a8761a16a9d183676b03cf493417816e; from 64ee3cf096ac590e7da2ceac1c390546bff5e240 before bba13ad17b1a11b3f1ed9b3a5d556191d7755a59 | CNA record |
References
- https://git.kernel.org/stable/c/88752b811f72aa7a16de6dad4b25031d7308673e
- https://git.kernel.org/stable/c/eddd0159a8761a16a9d183676b03cf493417816e
- https://git.kernel.org/stable/c/bba13ad17b1a11b3f1ed9b3a5d556191d7755a59
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.