CVE-2026-74687

HIGH
MEDIUM Priority: 0.01 BB Relevance: 41/100
Published: 2026-08-22 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: watchdog: at91sam9_wdt: prevent timer rearm during teardown at91_ping() rearms the watchdog timer from its callback. timer_delete() neither waits for a running callback nor prevents it from rearming the timer, so probe failure or driver removal can leave the timer accessing the devm-allocated at91wdt after it has been freed. Use timer_shutdown_sync() on both teardown paths. It waits for a running callback and rejects any attempt by the callback to rearm the timer.

Affected Software (7)

VendorProductVersion
Linux Linux 5161b31dc39a6d6dadc95f298de48a725b73ada8 < f96c18a766477e5f33d51697963a5c8aed260dae
Linux Linux 5161b31dc39a6d6dadc95f298de48a725b73ada8 < a9e0efcb1125e6b452c648671f15920c4955b681
Linux Linux 5161b31dc39a6d6dadc95f298de48a725b73ada8 < 1beb4dd6a30dea699e98990dd61f892ed1c0985e
Linux Linux 5161b31dc39a6d6dadc95f298de48a725b73ada8 < 29fe74c9aa69d78c1c6a3930f1d9fc5db71a6eed
Linux Linux 5161b31dc39a6d6dadc95f298de48a725b73ada8 < b7949b0a7d998013b7ec8617a0ef5b07cca80be4
Linux Linux 5161b31dc39a6d6dadc95f298de48a725b73ada8 < 8444d66aa6b6e7fe0a26fa1a00a11cb4d0523783
Linux Linux 3.14

Bug Bounty Relevance

41 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

7.8 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.18%
Raw Score 0.001760
Percentile 7.1%
Date 2026-11-01

EPSS Trend

2026-11-01
0.00176
2026-10-31
0.00176
2026-10-30
0.00175
2026-10-29
0.00175

Intelligence Sources

mitre ref →
nvd ref →