CVE-2026-74687

Source
https://cve.org/CVERecord?id=CVE-2026-74687
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-74687.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-74687
Downstream
BELL (1)
DEBIAN (1)
MGASA (2)
UBUNTU (1)
Published
2026-08-22T15:32:52Z
Modified
2026-10-31T02:47:53Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
watchdog: at91sam9_wdt: prevent timer rearm during teardown
Details

In the Linux kernel, the following vulnerability has been resolved:

watchdog: at91sam9_wdt: prevent timer rearm during teardown

at91_ping() rearms the watchdog timer from its callback. timer_delete() neither waits for a running callback nor prevents it from rearming the timer, so probe failure or driver removal can leave the timer accessing the devm-allocated at91wdt after it has been freed.

Use timer_shutdown_sync() on both teardown paths. It waits for a running callback and rejects any attempt by the callback to rearm the timer.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74687.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5161b31dc39a6d6dadc95f298de48a725b73ada8
Fixed
f96c18a766477e5f33d51697963a5c8aed260dae
Fixed
a9e0efcb1125e6b452c648671f15920c4955b681
Fixed
1beb4dd6a30dea699e98990dd61f892ed1c0985e
Fixed
29fe74c9aa69d78c1c6a3930f1d9fc5db71a6eed
Fixed
b7949b0a7d998013b7ec8617a0ef5b07cca80be4
Fixed
8444d66aa6b6e7fe0a26fa1a00a11cb4d0523783

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-74687.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.14.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.45
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.9

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-74687.json"