CVE-2026-74320

Received Received - Intake

Buffer Overrun in Linux Kernel sm501fb Driver

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: fbdev: sm501fb: Fix buffer errors in OF binding code The code that gets the frame buffer mode from OF has 'use after free', 'buffer overrun' and memory leaks. info->edid_data isn't free if the probe functions fail or if pd->def_mode is set. If both the CRT and PANEL are enabled info->edid_data is used after being freed and is freed twice. The string returned by of_get_property(np, "mode", &len) is just written over either the static "640x480-16@60" or the module parameter string without any regard for the length (which is most likely longer). Use kstrump() for the OF mode and free everything before freeing 'info.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-74320

EUVD

EUVD-2026-59467

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel's sm501fb driver involves buffer errors during OF (Open Firmware) binding. It includes use-after-free, buffer overrun, and memory leaks. Specifically, info->edid_data isn't freed properly if probe functions fail or if pd->def_mode is set. When both CRT and PANEL are enabled, info->edid_data is used after being freed and freed twice. Additionally, the mode string from OF is written over without length checks, risking overflow.

Detection Guidance

This vulnerability is specific to the Linux kernel's sm501fb driver and involves memory corruption issues in the OF (Open Firmware) binding code. Detection requires checking the kernel version and sm501fb driver status on Linux systems. Use commands like 'uname -a' to check kernel version and 'lsmod | grep sm501fb' to verify if the driver is loaded.

Impact Analysis

This vulnerability could lead to system crashes, data corruption, or privilege escalation if exploited. Memory corruption issues like use-after-free or buffer overruns may allow attackers to execute arbitrary code or cause denial-of-service conditions on affected systems running the vulnerable Linux kernel.

Compliance Impact

This vulnerability involves memory corruption issues in the Linux kernel's frame buffer driver, including use-after-free, buffer overruns, and memory leaks. Such flaws could potentially lead to unauthorized memory access or data exposure, which may impact compliance with data protection regulations like GDPR or HIPAA if exploited to access sensitive information.

Mitigation Strategies

Immediate mitigation involves updating the Linux kernel to a patched version that resolves this issue. Check your distribution's security updates or kernel patches. If using a custom kernel, apply the relevant patch from the Linux kernel source. Disable the sm501fb driver if not needed via kernel module blacklisting.

Hi! I’m here to help you understand CVE-2026-74320. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70