The Linux kernel vulnerability CVE-2026-74687 concerns the at91sam9_wdt watchdog driver. The at91_ping() function rearmed the watchdog timer from its callback, but timer_delete() did not synchronize with the callback execution, allowing the timer to access freed memory after device removal or probe failure. This use-after-free condition was addressed by replacing timer_delete() with timer_shutdown_sync(), which waits for any running callback to complete and prevents the callback from rearming the timer during teardown.

The vulnerability could cause use-after-free conditions where the timer callback accesses memory that has already been freed, potentially leading to kernel crashes or undefined behavior. No known exploits in the wild have been reported. The impact is primarily stability and reliability degradation rather than direct remote code execution or privilege escalation.

A fix is available and has been applied in the Linux kernel by using timer_shutdown_sync() in the watchdog driver teardown paths. Users should update to a kernel version that includes this fix. No additional mitigations are indicated.