CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel, specifically in the handling of the `reserved_mem` pointer, which can lead to a use-after-free condition if the `alloc_reserved_mem_array()` function fails. This flaw could allow an attacker to exploit freed memory, potentially leading to system instability or arbitrary code execution. Organizations using affected versions of the Linux kernel should prioritize patching this vulnerability to mitigate associated risks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails The global pointer 'reserved_mem' continues to reference the reserved_mem_array which lives in __initdata if alloc_reserved_mem_array() fails. of_reserved_mem_lookup() is exported for post-init use, that would dereference freed memory and trigger a use-after-free. So reset reserved_mem_count to 0 when alloc_reserved_mem_array() fails.