{"apiVersion":"1.0","identifier":"CVE-2026-74320","description":"In the Linux kernel, the following vulnerability has been resolved: fbdev: sm501fb: Fix buffer errors in OF binding code The code that gets the frame buffer mode from OF has -use after free-, -buffer overrun- and memory leaks. info->edid_data isn-t free if the probe functions fail or if pd->def_mode is set. If both the CRT and PANEL are enabled info->edid_data is used after being freed and is freed twice. The string returned by of_get_property(np, -mode-, &len) is just written over either the static -640x480-16@60- or the module parameter string without any regard for the length (which is most likely longer). Use kstrump() for the OF mode and free everything before freeing -info.","publishedAt":"2026-08-15T06:22:32","lastModifiedAt":"2026-08-17T06:19:26","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-74320","cvssScore":null,"cvssVector":"Pending","epssProbability":0.00177,"riskScore":0,"affectedProduct":"Linux kernel","affectedVersions":"unknown","vulnerabilityType":"Kernel","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-74320","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-74320","en":"https://www.redsauce.net/en/cves/CVE-2026-74320","fr":"https://www.redsauce.net/fr/cves/CVE-2026-74320","pt":"https://www.redsauce.net/pt/cves/CVE-2026-74320","de":"https://www.redsauce.net/de/cves/CVE-2026-74320","sk":"https://www.redsauce.net/sk/cves/CVE-2026-74320","el":"https://www.redsauce.net/el/cves/CVE-2026-74320"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-74320"}}