CVE-2026-74404

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An off-by-one heap buffer overflow exists in the snp filter reserved mem regions() function, which is called via walk iomem res desc(). The issue occurs because the bounds check does not properly account for the entry being written. Specifically, when range list->num elements is 255, the calculation allows writing range->base and range->page count beyond the PAGE SIZE buffer allocated by kzalloc.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.