CVE-2026-74320

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The sm501fb driver in the fbdev module contains memory management errors in the Open Firmware (OF) binding code. The issue involves a use-after-free condition, buffer overruns, and memory leaks when retrieving the frame buffer mode. Specifically, the info->edid data variable may not be freed during probe function failures or when pd->def mode is set. Additionally, if both CRT and PANEL are enabled, info->edid data is accessed after being freed and is subjected to a double-free. Furthermore, the of get property() function can cause a buffer overrun by writing a string to a static or module parameter string without validating the length.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.