{"id":"CVE-2026-74327","title":"vmalloc: fix NULL pointer dereference in is_vm_area_hugepages()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nvmalloc: fix NULL pointer dereference in is_vm_area_hugepages()\n\nfind_vm_area() can return NULL if the given address is not a valid vmalloc\narea.  Check the return valu…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 121e6f3258fe393e22c36f61a319be8a4f2c05ae < c741485fa09bf5900f76d95424d86316d0a00331","Linux >= 121e6f3258fe393e22c36f61a319be8a4f2c05ae < b86f98e53df4f5d57259817b8e9a00167b78bae6","Linux >= 121e6f3258fe393e22c36f61a319be8a4f2c05ae < af71c2b88ccae44418e273bdfe0c96be8515151e","Linux >= 121e6f3258fe393e22c36f61a319be8a4f2c05ae < a1bca6b69bd934e2731d009e645038e05d57ce59","Linux >= 121e6f3258fe393e22c36f61a319be8a4f2c05ae < bbd664b7c77f6488cd5652231c0fe01d069a73ea","Linux >= 121e6f3258fe393e22c36f61a319be8a4f2c05ae < 55a44f5259e6a5f1d5b11cb0e19e943c9cc62280","Linux >= 121e6f3258fe393e22c36f61a319be8a4f2c05ae < c55dd3b46c1208d6d2ea737a8aefef4aa4c70cb8","Linux 5.13"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:56:05.518779Z"},"published":"2026-08-15","updated":"2026-11-06","sourceUpdated":"2026-11-06T17:05:43.892Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-74327","references":[{"url":"https://git.kernel.org/stable/c/c741485fa09bf5900f76d95424d86316d0a00331"},{"url":"https://git.kernel.org/stable/c/b86f98e53df4f5d57259817b8e9a00167b78bae6"},{"url":"https://git.kernel.org/stable/c/af71c2b88ccae44418e273bdfe0c96be8515151e"},{"url":"https://git.kernel.org/stable/c/a1bca6b69bd934e2731d009e645038e05d57ce59"},{"url":"https://git.kernel.org/stable/c/bbd664b7c77f6488cd5652231c0fe01d069a73ea"},{"url":"https://git.kernel.org/stable/c/55a44f5259e6a5f1d5b11cb0e19e943c9cc62280"},{"url":"https://git.kernel.org/stable/c/c55dd3b46c1208d6d2ea737a8aefef4aa4c70cb8"}],"tags":["cve.org"],"epss":0.00215,"epssPercentile":0.11893,"ingestedAt":"2026-11-06T18:00:12.563Z","slug":"CVE-2026-74327","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nvmalloc: fix NULL pointer dereference in is_vm_area_hugepages()\n\nfind_vm_area() can return NULL if the given address is not a valid vmalloc\narea.  Check the return value before dereferencing it to avoid a kernel\ncrash.\n\n## Affected\n\n- `Linux >= 121e6f3258fe393e22c36f61a319be8a4f2c05ae < c741485fa09bf5900f76d95424d86316d0a00331`\n- `Linux >= 121e6f3258fe393e22c36f61a319be8a4f2c05ae < b86f98e53df4f5d57259817b8e9a00167b78bae6`\n- `Linux >= 121e6f3258fe393e22c36f61a319be8a4f2c05ae < af71c2b88ccae44418e273bdfe0c96be8515151e`\n- `Linux >= 121e6f3258fe393e22c36f61a319be8a4f2c05ae < a1bca6b69bd934e2731d009e645038e05d57ce59`\n- `Linux >= 121e6f3258fe393e22c36f61a319be8a4f2c05ae < bbd664b7c77f6488cd5652231c0fe01d069a73ea`\n- `Linux >= 121e6f3258fe393e22c36f61a319be8a4f2c05ae < 55a44f5259e6a5f1d5b11cb0e19e943c9cc62280`\n- `Linux >= 121e6f3258fe393e22c36f61a319be8a4f2c05ae < c55dd3b46c1208d6d2ea737a8aefef4aa4c70cb8`\n- `Linux 5.13`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}