Answer in brief
CVE-2026-74491 records a Unknown severity vulnerability in of/address: Fix NULL bus dereference in of_pci_range_parser_one(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=64ee3cf096ac590e7da2ceac1c390546bff5e240 <88752b811f72aa7a16de6dad4b25031d7308673e || >=64ee3cf096ac590e7da2ceac1c390546bff5e240 <eddd0159a8761a16a9d183676b03cf493417816e || >=64ee3cf096ac590e7da2ceac1c390546bff5e240 <bba13ad17b1a11b3f1ed9b3a5d556191d7755a59 | 88752b811f72aa7a16de6dad4b25031d7308673e, eddd0159a8761a16a9d183676b03cf493417816e, bba13ad17b1a11b3f1ed9b3a5d556191d7755a59 |
| Linux/Linuxgeneric | 6.13 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: of/address: Fix NULL bus dereference in of_pci_range_parser_one() The bus matching rework made of_match_bus() return NULL for nodes with ranges/dma-ranges but no local #address-cells. parser_init() stored that NULL bus, and the range iterator later dereferenced it. Reject such nodes in parser_init(), leaving an explicit empty iterator for callers that ignore the init return, and make of_dma_get_max_cpu_address() honour the init failure so a rejected node cannot clamp the DMA limit.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-74491 records a Unknown severity vulnerability in of/address: Fix NULL bus dereference in of_pci_range_parser_one(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=64ee3cf096ac590e7da2ceac1c390546bff5e240 <88752b811f72aa7a16de6dad4b25031d7308673e || >=64ee3cf096ac590e7da2ceac1c390546bff5e240 <eddd0159a8761a16a9d183676b03cf493417816e || >=64ee3cf096ac590e7da2ceac1c390546bff5e240 <bba13ad17b1a11b3f1ed9b3a5d556191d7755a59 | 88752b811f72aa7a16de6dad4b25031d7308673e, eddd0159a8761a16a9d183676b03cf493417816e, bba13ad17b1a11b3f1ed9b3a5d556191d7755a59 |
| Linux/Linuxgeneric | 6.13 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: of/address: Fix NULL bus dereference in of_pci_range_parser_one() The bus matching rework made of_match_bus() return NULL for nodes with ranges/dma-ranges but no local #address-cells. parser_init() stored that NULL bus, and the range iterator later dereferenced it. Reject such nodes in parser_init(), leaving an explicit empty iterator for callers that ignore the init return, and make of_dma_get_max_cpu_address() honour the init failure so a rejected node cannot clamp the DMA limit.
Quoted source text, attributed separately from HOL analysis.