In the Linux kernel, the following vulnerability has been resolved:
of: reservedmem: avoid post-init UAF when allocreservedmemarray() fails
The global pointer 'reservedmem' continues to reference the reservedmem_array which lives in __initdata if allocreservedmemarray() fails. ofreservedmemlookup() is exported for post-init use, that would dereference freed memory and trigger a use-after-free.
So reset reservedmemcount to 0 when allocreservedmem_array() fails.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74352.json",
"cna_assigner": "Linux"
}