Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-74491

of/address: Fix NULL bus dereference in of_pci_range_parser_one()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: of/address: Fix NULL bus dereference in of_pci_range_parser_one() The bus matching rework made of_match_bus() return NULL for nodes with ranges/dma-ranges but no local #address-cells. parser_init() stored that NULL bus, and the range iterator later dereferenced it. Reject such nodes in parser_init(), leaving an explicit empty iterator for callers that ignore the init return, and make of_dma_get_max_cpu_address() honour the init failure so a rejected node cannot clamp the DMA limit.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 64ee3cf096ac590e7da2ceac1c390546bff5e240 to < 88752b811f72aa7a16de6dad4b25031d7308673eaffected
  • 64ee3cf096ac590e7da2ceac1c390546bff5e240 to < eddd0159a8761a16a9d183676b03cf493417816eaffected
  • 64ee3cf096ac590e7da2ceac1c390546bff5e240 to < bba13ad17b1a11b3f1ed9b3a5d556191d7755a59affected

Linux Linux

Default version status: affected

  • 6.13affected
  • 0 to < 6.13unaffected
  • 6.18.44 to ≤ 6.18.*unaffected
  • 7.1.8 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References