CVE-2026-74352
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails The global pointer 'reserved_mem' continues to reference the reserved_mem_array which lives in __initdata if alloc_reserved_mem_array() fails. of_reserved_mem_lookup() is exported for post-init use, that would dereference freed memory and trigger a use-after-free. So reset reserved_mem_count to 0 when alloc_reserved_mem_array() fails.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedAug 15, 2026
First seenAug 15, 2026
How to fix
Update
- Linux Linux6d28e6ad3c5c9248577f21057baa9bf16fa9ef3b, 9af58d10d0d8c08b822de5fc99e61f31a87ede8d, cbd3102fe27bc87da244bf4c3ba670ea4698b0a8, e1686ca81dbf3edbde589b7daf312b45cbf76e03 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | b6ae53301eb41f0f59f83c161248b186bca7da70 ≤ v < 6d28e6ad3c5c9248577f21057baa9bf16fa9ef3b, 00c9a452a235c61f099504783badd9a7675ff5a5 ≤ v < 9af58d10d0d8c08b822de5fc99e61f31a87ede8d, 00c9a452a235c61f099504783badd9a7675ff5a5 ≤ v < cbd3102fe27bc87da244bf4c3ba670ea4698b0a8, 00c9a452a235c61f099504783badd9a7675ff5a5 ≤ v < e1686ca81dbf3edbde589b7daf312b45cbf76e03, 6.13 | 6d28e6ad3c5c9248577f21057baa9bf16fa9ef3b, 9af58d10d0d8c08b822de5fc99e61f31a87ede8d, cbd3102fe27bc87da244bf4c3ba670ea4698b0a8, e1686ca81dbf3edbde589b7daf312b45cbf76e03 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.