Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-74352— of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails

AI Predicted 4.4 Difficulty: Hard EPSS 0.17% · P6

Affected Version Matrix 9

VendorProductVersion RangeStatus
LinuxLinuxb6ae53301eb41f0f59f83c161248b186bca7da70< 6d28e6ad3c5c9248577f21057baa9bf16fa9ef3baffected
00c9a452a235c61f099504783badd9a7675ff5a5< 9af58d10d0d8c08b822de5fc99e61f31a87ede8daffected
00c9a452a235c61f099504783badd9a7675ff5a5< cbd3102fe27bc87da244bf4c3ba670ea4698b0a8affected
00c9a452a235c61f099504783badd9a7675ff5a5< e1686ca81dbf3edbde589b7daf312b45cbf76e03affected
6.13affected
< 6.13unaffected
6.18.40≤ 6.18.*unaffected
7.1.5≤ 7.1.*unaffected
… +1 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-74352

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails The global pointer 'reserved_mem' continues to reference the reserved_mem_array which lives in __initdata if alloc_reserved_mem_array() fails. of_reserved_mem_lookup() is exported for post-init use, that would dereference freed memory and trigger a use-after-free. So reset reserved_mem_count to 0 when alloc_reserved_mem_array() fails.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会开源的一个操作系统内核。 Linux kernel存在安全漏洞，该漏洞源于alloc_reserved_mem_array()失败时全局指针reserved_mem仍引用已释放的reserved_mem_array，可能导致释放后重用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux b6ae53301eb41f0f59f83c161248b186bca7da70 ~ 6d28e6ad3c5c9248577f21057baa9bf16fa9ef3b -
LinuxLinux 6.13 -

II. Public POCs for CVE-2026-74352

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-74352

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-74352 (4)

Same Patch Batch · Linux · 2026-08-15 · 846 CVEs total

CVE-2026-7428010.0 CRITICALcrypto: marvell/octeontx - fix DMA cleanup using wrong loop index
CVE-2026-7240710.0 CRITICALgeneve: validate inner network offset in geneve_gro_complete()
CVE-2026-7240810.0 CRITICALgeneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint
CVE-2026-7427910.0 CRITICALcrypto: cavium/cpt - fix DMA cleanup using wrong loop index
CVE-2026-7447510.0 CRITICALvxlan: use neigh_ha_snapshot() in route_shortcircuit()
CVE-2026-7430910.0 CRITICALvdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler
CVE-2026-7242110.0 CRITICALipv4: fib: Don't ignore error route in local/main tables.
CVE-2026-724939.9 CRITICALnet: serialize netif_running() check in enqueue_to_backlog()
CVE-2026-724639.8 CRITICALxfrm: Fix dev use-after-free in xfrm async resumption
CVE-2026-722489.8 CRITICALnetfilter: flowtable: support IPIP tunnel with direct xmit
CVE-2026-723819.8 CRITICALksmbd: fix use-after-free of fp->owner.name in durable handle owner check
CVE-2026-724779.8 CRITICALfs/ntfs3: call _ntfs_bad_inode() when failing to rename
CVE-2026-724739.8 CRITICALxprtrdma: Decouple req recycling from RPC completion
CVE-2026-724729.8 CRITICALnfs: use nfsi->rwsem to protect traversal of the file lock list
CVE-2026-744069.8 CRITICALvxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().
CVE-2026-722219.8 CRITICALsunrpc: wait for in-flight TLS handshake callback when cancel loses race
CVE-2026-721379.8 CRITICALxfrm: nat_keepalive: avoid double free on send error
CVE-2026-743769.8 CRITICALmd/raid10: reset read_slot when reusing r10bio for discard
CVE-2026-744019.8 CRITICALdlm: fix add msg handle in send_queue ordered
CVE-2026-722349.8 CRITICALbatman-adv: access unicast_ttvn skb->data only after skb realloc

Showing top 20 of 846 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-74352

No comments yet

Leave a comment