CVE-2026-74491: of/address: Fix NULL bus dereference in of_pci_range_parser_one()
In the Linux kernel, the following vulnerability has been resolved:
of/address: Fix NULL bus dereference in ofpcirangeparserone()
The bus matching rework made ofmatchbus() return NULL for nodes with ranges/dma-ranges but no local #address-cells. parserinit() stored that NULL bus, and the range iterator later dereferenced it.
Reject such nodes in parserinit(), leaving an explicit empty iterator for callers that ignore the init return, and make ofdmagetmaxcpuaddress() honour the init failure so a rejected node cannot clamp the DMA limit.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74491?
CVE-2026-74491 is classified with a risk rating of 27.
How do I fix CVE-2026-74491?
To address CVE-2026-74491, update your Linux kernel to the latest version where this vulnerability has been resolved.
What systems are affected by CVE-2026-74491?
CVE-2026-74491 affects versions of the Linux kernel that implement the of_pci_range_parser_one() function and have the described bus matching issue.
What are the potential consequences of exploiting CVE-2026-74491?
Exploiting CVE-2026-74491 could lead to a NULL dereference, potentially causing a denial of service.
When was CVE-2026-74491 published?
CVE-2026-74491 was published on August 15, 2026.