CVE-2026-74491

In the Linux kernel, the following vulnerability has been resolved:

of/address: Fix NULL bus dereference in ofpcirangeparserone()

The bus matching rework made ofmatchbus() return NULL for nodes with ranges/dma-ranges but no local #address-cells. parser_init() stored that NULL bus, and the range iterator later dereferenced it.

Reject such nodes in parserinit(), leaving an explicit empty iterator for callers that ignore the init return, and make ofdmagetmaxcpuaddress() honour the init failure so a rejected node cannot clamp the DMA limit.