Vulnerability in Linux

CVE-2026-74327

In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix NULL pointer dereference in is_vm_area_hugepages() find_vm_area() can return NULL if the given address is not a valid vmalloc area. Check the return value before dereferencing it to avoid a kernel crash.

Affected products

  • Linux — versions 121e6f3258fe393e22c36f61a319be8a4f2c05ae, 5.13, 0

References