CVE-2026-74690 addresses a use-after-free vulnerability in the Linux kernel's s390/ism subsystem. Specifically, an ism interrupt handler may be active in parallel with the ism_dev_exit() function, which frees certain data structures (sba and ieq). This concurrency can cause the interrupt handler to access freed memory, leading to undefined behavior. The remediation involves preventing new interrupts after unregister_ieq() and ensuring that ongoing interrupt handlers are drained via free_irq() before the ism data structures are freed.

The vulnerability could lead to use-after-free conditions in the kernel, potentially causing system instability or crashes. No information about exploitation in the wild or privilege escalation is provided.

A fix has been implemented in the Linux kernel to prevent new interrupts after unregister_ieq() and to drain ongoing interrupt handlers before freeing ism data structures. Users should apply the official kernel updates that include this fix. Patch status is not explicitly confirmed in the provided data; check the vendor advisory for current remediation guidance.