In the Linux kernel, the following vulnerability has been resolved:

vmalloc: fix NULL pointer dereference in is_vm_area_hugepages()

find_vm_area() can return NULL if the given address is not a valid vmalloc
area. Check the return value before dereferencing it to avoid a kernel
crash.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00172.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
121e6f3258fe393e22c36f61a319be8a4f2c05ae affected < c741485fa09bf5900f76d95424d86316d0a00331
121e6f3258fe393e22c36f61a319be8a4f2c05ae affected < b86f98e53df4f5d57259817b8e9a00167b78bae6
121e6f3258fe393e22c36f61a319be8a4f2c05ae affected < af71c2b88ccae44418e273bdfe0c96be8515151e
121e6f3258fe393e22c36f61a319be8a4f2c05ae affected < a1bca6b69bd934e2731d009e645038e05d57ce59
121e6f3258fe393e22c36f61a319be8a4f2c05ae affected < bbd664b7c77f6488cd5652231c0fe01d069a73ea
121e6f3258fe393e22c36f61a319be8a4f2c05ae affected < 55a44f5259e6a5f1d5b11cb0e19e943c9cc62280
121e6f3258fe393e22c36f61a319be8a4f2c05ae affected < c55dd3b46c1208d6d2ea737a8aefef4aa4c70cb8
Linux Linux affected
Version Status Constraints
5.13 affected —
0 unaffected < 5.13
5.15.212 unaffected ≤ 5.15.*
6.1.178 unaffected ≤ 6.1.*
6.6.145 unaffected ≤ 6.6.*
6.12.97 unaffected ≤ 6.12.*
6.18.40 unaffected ≤ 6.18.*
7.1.5 unaffected ≤ 7.1.*
7.2-rc1 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/55a44f5259e6a5f1d5b11cb0e19e943c9cc62280 cve-icon cve-icon
https://git.kernel.org/stable/c/a1bca6b69bd934e2731d009e645038e05d57ce59 cve-icon cve-icon
https://git.kernel.org/stable/c/af71c2b88ccae44418e273bdfe0c96be8515151e cve-icon cve-icon
https://git.kernel.org/stable/c/b86f98e53df4f5d57259817b8e9a00167b78bae6 cve-icon cve-icon
https://git.kernel.org/stable/c/bbd664b7c77f6488cd5652231c0fe01d069a73ea cve-icon cve-icon
https://git.kernel.org/stable/c/c55dd3b46c1208d6d2ea737a8aefef4aa4c70cb8 cve-icon cve-icon
https://git.kernel.org/stable/c/c741485fa09bf5900f76d95424d86316d0a00331 cve-icon cve-icon
History

Sat, 15 Aug 2026 13:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-476

Sat, 15 Aug 2026 06:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix NULL pointer dereference in is_vm_area_hugepages() find_vm_area() can return NULL if the given address is not a valid vmalloc area. Check the return value before dereferencing it to avoid a kernel crash.
Title vmalloc: fix NULL pointer dereference in is_vm_area_hugepages()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:58:21.665Z

Reserved: 2026-08-15T05:44:03.884Z

Link: CVE-2026-74327

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:22:33.383

Modified: 2026-08-15T06:22:33.383

Link: CVE-2026-74327

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-15T13:15:03Z

Weaknesses