of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails
Published Aug 15, 2026
5.5
MEDIUMCVSS 3.1
EPSS 0.21%
Description
The global pointer 'reserved_mem' continues to reference the reserved_mem_array which lives in __initdata if alloc_reserved_mem_array() fails. of_reserved_mem_lookup() is exported for post-init use, that would dereference freed memory and trigger a use-after-free.
So reset reserved_mem_count to 0 when alloc_reserved_mem_array() fails.
Affected products
-
Affected
- ≥ , <
- ≥ , <
- ≥ , <
- ≥ , <
-
Affected
- 6.13
Unaffected
- ≥ 0, < 6.13
- ≥ 6.18.40, ≤ 6.18.*
- ≥ 7.1.5, ≤ 7.1.*
- 7.2
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
No data.
No data.
Red Hat Enterprise Linux 10
kernel
Fix deferred
Red Hat Enterprise Linux 6
kernel
Not affected
Red Hat Enterprise Linux 7
kernel
Not affected
Red Hat Enterprise Linux 7
kernel-rt
Not affected
Red Hat Enterprise Linux 8
kernel
Not affected
Red Hat Enterprise Linux 8
kernel-rt
Not affected
Red Hat Enterprise Linux 9
kernel
Not affected
Red Hat Enterprise Linux 9
kernel-rt
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 10 | kernel | Fix deferred | n/a |
| Red Hat Enterprise Linux 6 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel-rt | Not affected | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (10)
- https://access.redhat.com/security/cve/CVE-2026-74352 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2516825 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-59499 Advisory
- https://git.kernel.org/stable/c/6d28e6ad3c5c9248577f21057baa9bf16fa9ef3b
- https://git.kernel.org/stable/c/9af58d10d0d8c08b822de5fc99e61f31a87ede8d
- https://git.kernel.org/stable/c/cbd3102fe27bc87da244bf4c3ba670ea4698b0a8
- https://git.kernel.org/stable/c/e1686ca81dbf3edbde589b7daf312b45cbf76e03
- https://lore.kernel.org/linux-cve-announce/2026081559-CVE-2026-74352-fec6@gregkh/T
- https://nvd.nist.gov/vuln/detail/CVE-2026-74352
- https://www.cve.org/CVERecord?id=CVE-2026-74352
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
No data
GitHub
No data