SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-74690

HIGH · CVSS 8.4 EPSS 0.14%

Source: NVD + CISA KEV + EPSS · Published 2026-08-22 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's s390 architecture, specifically within the ism interrupt handling mechanism, where a use-after-free condition can occur during the ism_dev_exit() process. This flaw allows an active interrupt handler to access freed data structures, potentially leading to system instability or exploitation. Organizations utilizing Linux on s390 systems should prioritize addressing this vulnerability to maintain system integrity and security.

CVE
CVE-2026-74690
Severity
HIGH
CVSS
8.4
EPSS
0.14%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ism_dev_exit() A ism interrupt handler can be active in parallel with ism_dev_exit(), accessing freed data structures. No new interrupts will be generated after unregister_ieq(). Drain ongoing interrupt handlers by free_irq(), before freeing ism data structures.