CVE-2026-74491
Description
In the Linux kernel, the following vulnerability has been resolved: of/address: Fix NULL bus dereference in of_pci_range_parser_one() The bus matching rework made of_match_bus() return NULL for nodes with ranges/dma-ranges but no local #address-cells. parser_init() stored that NULL bus, and the range iterator later dereferenced it. Reject such nodes in parser_init(), leaving an explicit empty iterator for callers that ignore the init return, and make of_dma_get_max_cpu_address() honour the init failure so a rejected node cannot clamp the DMA limit.
How to fix
- Linux Linux88752b811f72aa7a16de6dad4b25031d7308673e, eddd0159a8761a16a9d183676b03cf493417816e, bba13ad17b1a11b3f1ed9b3a5d556191d7755a59 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 64ee3cf096ac590e7da2ceac1c390546bff5e240 ≤ v < 88752b811f72aa7a16de6dad4b25031d7308673e, 64ee3cf096ac590e7da2ceac1c390546bff5e240 ≤ v < eddd0159a8761a16a9d183676b03cf493417816e, 64ee3cf096ac590e7da2ceac1c390546bff5e240 ≤ v < bba13ad17b1a11b3f1ed9b3a5d556191d7755a59, 6.13 | 88752b811f72aa7a16de6dad4b25031d7308673e, eddd0159a8761a16a9d183676b03cf493417816e, bba13ad17b1a11b3f1ed9b3a5d556191d7755a59 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.