Riskcovery

CVE-2026-74352

of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails

State
Published
Severity
Not scored
Published
Aug 15, 2026
Updated
Aug 17, 2026
Reserved
Aug 15, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails

The global pointer 'reserved_mem' continues to reference the reserved_mem_array which lives in __initdata if alloc_reserved_mem_array() fails. of_reserved_mem_lookup() is exported for post-init use, that would dereference freed memory and trigger a use-after-free.

So reset reserved_mem_count to 0 when alloc_reserved_mem_array() fails.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • b6ae53301eb41f0f59f83c161248b186bca7da70 to before 6d28e6ad3c5c9248577f21057baa9bf16fa9ef3bAffected
  • 00c9a452a235c61f099504783badd9a7675ff5a5 to before 9af58d10d0d8c08b822de5fc99e61f31a87ede8dAffected
  • 00c9a452a235c61f099504783badd9a7675ff5a5 to before cbd3102fe27bc87da244bf4c3ba670ea4698b0a8Affected
  • 00c9a452a235c61f099504783badd9a7675ff5a5 to before e1686ca81dbf3edbde589b7daf312b45cbf76e03Affected
LinuxLinux
  • 6.13Affected
  • before 6.13Not affected
  • 6.18.40 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.