CVE-2026-74327

vmalloc: fix NULL pointer dereference in is_vm_area_hugepages()

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Aug 17, 2026
Reserved: Aug 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

vmalloc: fix NULL pointer dereference in is_vm_area_hugepages()

find_vm_area() can return NULL if the given address is not a valid vmalloc area. Check the return value before dereferencing it to avoid a kernel crash.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	121e6f3258fe393e22c36f61a319be8a4f2c05ae to before c741485fa09bf5900f76d95424d86316d0a00331Affected 121e6f3258fe393e22c36f61a319be8a4f2c05ae to before b86f98e53df4f5d57259817b8e9a00167b78bae6Affected 121e6f3258fe393e22c36f61a319be8a4f2c05ae to before af71c2b88ccae44418e273bdfe0c96be8515151eAffected 121e6f3258fe393e22c36f61a319be8a4f2c05ae to before a1bca6b69bd934e2731d009e645038e05d57ce59Affected 121e6f3258fe393e22c36f61a319be8a4f2c05ae to before bbd664b7c77f6488cd5652231c0fe01d069a73eaAffected 121e6f3258fe393e22c36f61a319be8a4f2c05ae to before 55a44f5259e6a5f1d5b11cb0e19e943c9cc62280Affected 121e6f3258fe393e22c36f61a319be8a4f2c05ae to before c55dd3b46c1208d6d2ea737a8aefef4aa4c70cb8Affected
LinuxLinux	5.13Affected before 5.13Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

121e6f3258fe393e22c36f61a319be8a4f2c05ae to before c741485fa09bf5900f76d95424d86316d0a00331Affected
121e6f3258fe393e22c36f61a319be8a4f2c05ae to before b86f98e53df4f5d57259817b8e9a00167b78bae6Affected
121e6f3258fe393e22c36f61a319be8a4f2c05ae to before af71c2b88ccae44418e273bdfe0c96be8515151eAffected
121e6f3258fe393e22c36f61a319be8a4f2c05ae to before a1bca6b69bd934e2731d009e645038e05d57ce59Affected
121e6f3258fe393e22c36f61a319be8a4f2c05ae to before bbd664b7c77f6488cd5652231c0fe01d069a73eaAffected
121e6f3258fe393e22c36f61a319be8a4f2c05ae to before 55a44f5259e6a5f1d5b11cb0e19e943c9cc62280Affected
121e6f3258fe393e22c36f61a319be8a4f2c05ae to before c55dd3b46c1208d6d2ea737a8aefef4aa4c70cb8Affected

LinuxLinux

5.13Affected
before 5.13Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.