SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-74687

HIGH · CVSS 7.8 EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-08-22 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's watchdog timer implementation for the at91sam9_wdt, where improper handling during teardown can lead to a race condition, allowing the timer to access freed memory. This could result in undefined behavior or system instability if the timer is rearmed after the associated resources have been released. Organizations using affected Linux systems, particularly those relying on the at91sam9 platform, should prioritize applying the fix to mitigate potential risks.

CVE
CVE-2026-74687
Severity
HIGH
CVSS
7.8
EPSS
0.13%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: watchdog: at91sam9_wdt: prevent timer rearm during teardown at91_ping() rearms the watchdog timer from its callback. timer_delete() neither waits for a running callback nor prevents it from rearming the timer, so probe failure or driver removal can leave the timer accessing the devm-allocated at91wdt after it has been freed. Use timer_shutdown_sync() on both teardown paths. It waits for a running callback and rejects any attempt by the callback to rearm the timer.