AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-74329

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's watchdog device management, specifically in the improper unregistration of the power management (PM) notifier when a watchdog device is unregistered. This oversight can lead to potential use-after-free conditions, where a stale pointer may be accessed during suspend/resume operations, potentially causing system instability or crashes. Organizations using Linux-based systems, particularly those relying on watchdog devices for system monitoring and recovery, should prioritize addressing this issue to ensure system reliability and integrity.

CVE
CVE-2026-74329
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: watchdog: unregister PM notifier on watchdog unregister watchdog_register_device() registers wdd->pm_nb when WDOG_NO_PING_ON_SUSPEND is set, but watchdog_unregister_device() does not remove it. This leaves an embedded notifier block on the PM notifier chain after the watchdog device has been unregistered. A later suspend/resume notification can then call watchdog_pm_notifier() with a stale watchdog_device pointer, or at minimum after wdd->wd_data has been cleared by watchdog_dev_unregister(). Unregister the PM notifier before tearing down the watchdog device.