Skip to main content
VulnerabilityPublished Updated

CVE-2026-74329: Linux kernel · watchdog: unregister PM notifier on watchdog unregister

Affects Linux kernelSource CVE Database V5

0
Compare

Not known to be exploited · fixed in e690afea5c876a4abfa2978c6a664460ed7d1217 : update Linux kernel when convenient.

Data as of 6 Nov 2026, 18:10 UTC

Severity
Medium

Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD

Thin evidence

One scorer or none
CISA SSVC
Exploitation
No evidence of active exploitation and no public proof of concept
Automatable
Attackers cannot reliably automate steps 1–4 of the kill chain
Technical impact
Limited control over the software or limited information exposure

CISA SSVC assessment, 2026-11-06.

Patch
Available – fixed in e690afea5c876a4abfa2978c6a664460ed7d1217, cd2d1b1f99308f7680d75a377daaff363f1cc736, c70b5bb6f04f77ef90e047d7edc2f476e206909f +4

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 15 Aug 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 6 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3, < e690afea5c876a4abfa2978c6a664460ed7d1217
Fixed in
  • e690afea5c876a4abfa2978c6a664460ed7d1217
LinuxLinuxAffected
  • ≥ 60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3, < cd2d1b1f99308f7680d75a377daaff363f1cc736
Fixed in
  • cd2d1b1f99308f7680d75a377daaff363f1cc736
LinuxLinuxAffected
  • ≥ 60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3, < c70b5bb6f04f77ef90e047d7edc2f476e206909f
Fixed in
  • c70b5bb6f04f77ef90e047d7edc2f476e206909f
LinuxLinuxAffected
  • ≥ 60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3, < a298c7302ee9584a7a1ac1e8acbede8d98ab51a4
Fixed in
  • a298c7302ee9584a7a1ac1e8acbede8d98ab51a4
LinuxLinuxAffected
  • ≥ 60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3, < 89184909634e50d086d86d8a0c03fc86fe8d889f
Fixed in
  • 89184909634e50d086d86d8a0c03fc86fe8d889f
LinuxLinuxAffected
  • ≥ 60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3, < 298821692d447c2f7b1bc9ef41cd88a31bf56436
Fixed in
  • 298821692d447c2f7b1bc9ef41cd88a31bf56436

AI-suggested

A fix is available and has been applied in the Linux kernel source as indicated by the listed fixed commits. Users and administrators should update to a kernel version that includes these fixes to mitigate the issue. No additional mitigation steps are indicated or necessary beyond applying the official fix.

Description

A vulnerability in the Linux kernel watchdog subsystem was fixed by ensuring the PM notifier is unregistered when the watchdog device is unregistered. Previously, the PM notifier remained registered after the watchdog device was removed, potentially causing suspend/resume notifications to reference stale pointers.

References

Community reviews

Loading reviews…