Strix
58.1K

CVE-2026-74329

UnknownEPSS 0.17%

Last modified

CVE-2026-74329 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: watchdog: unregister PM notifier on watchdog unregister watchdog_register_device() registers wdd->pm_nb when WDOG_NO_PING_ON_SUSPEND is set, but watchdog_unregister_device() does not remove it. This leaves an embedded notifier block on the PM notifier chain after the watchdog device has been unregistered. A later suspend/resume notification can then call watchdog_pm_notifier() with a stale watchdog_device pointer, or at minimum after wdd->wd_data has been cleared by watchdog_dev_unregister(). Unregister the PM notifier before tearing down the watchdog device.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: watchdog: unregister PM notifier on watchdog unregister watchdog_register_device() registers wdd->pm_nb when WDOG_NO_PING_ON_SUSPEND is set, but watchdog_unregister_device() does not remove it. This leaves an embedded notifier block on the PM notifier chain after the watchdog device has been unregistered. A later suspend/resume notification can then call watchdog_pm_notifier() with a stale watchdog_device pointer, or at minimum after wdd->wd_data has been cleared by watchdog_dev_unregister(). Unregister the PM notifier before tearing down the watchdog device.

Metrics

EPSS Probability
0.17%

7.0th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3, < cd2d1b1f99308f7680d75a377daaff363f1cc736; >= 60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3, < 5d9b58ec6f5de5e159a570d419b1b08b3b9f854b; >= 60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3, < 89184909634e50d086d86d8a0c03fc86fe8d889f; >= 60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3, < e690afea5c876a4abfa2978c6a664460ed7d1217; >= 60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3, < 298821692d447c2f7b1bc9ef41cd88a31bf56436; >= 60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3, < c70b5bb6f04f77ef90e047d7edc2f476e206909f; >= 60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3, < a298c7302ee9584a7a1ac1e8acbede8d98ab51a4
LinuxLinux5.15

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-74329?
In the Linux kernel, the following vulnerability has been resolved: watchdog: unregister PM notifier on watchdog unregister watchdog_register_device() registers wdd->pm_nb when WDOG_NO_PING_ON_SUSPEND is set, but watchdog_unregister_device() does not remove it. This leaves an embedded notifier block on the PM notifier chain after the watchdog device has been unregistered. A later suspend/resume notification can then call watchdog_pm_notifier() with a stale watchdog_device pointer, or at minimum after wdd->wd_data has been cleared by watchdog_dev_unregister(). Unregister the PM notifier before tearing down the watchdog device.
How severe is CVE-2026-74329?
Severity scoring for CVE-2026-74329 is pending analysis. The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2026-74329?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-74329?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST