CVE-2026-74687

watchdog: at91sam9_wdt: prevent timer rearm during teardown

State: Published
Severity: 7.8 High
Published: Aug 22, 2026
Updated: Oct 30, 2026
Reserved: Aug 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

watchdog: at91sam9_wdt: prevent timer rearm during teardown

at91_ping() rearms the watchdog timer from its callback. timer_delete() neither waits for a running callback nor prevents it from rearming the timer, so probe failure or driver removal can leave the timer accessing the devm-allocated at91wdt after it has been freed.

Use timer_shutdown_sync() on both teardown paths. It waits for a running callback and rejects any attempt by the callback to rearm the timer.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	5161b31dc39a6d6dadc95f298de48a725b73ada8 to before f96c18a766477e5f33d51697963a5c8aed260daeAffected 5161b31dc39a6d6dadc95f298de48a725b73ada8 to before a9e0efcb1125e6b452c648671f15920c4955b681Affected 5161b31dc39a6d6dadc95f298de48a725b73ada8 to before 1beb4dd6a30dea699e98990dd61f892ed1c0985eAffected 5161b31dc39a6d6dadc95f298de48a725b73ada8 to before 29fe74c9aa69d78c1c6a3930f1d9fc5db71a6eedAffected 5161b31dc39a6d6dadc95f298de48a725b73ada8 to before b7949b0a7d998013b7ec8617a0ef5b07cca80be4Affected 5161b31dc39a6d6dadc95f298de48a725b73ada8 to before 8444d66aa6b6e7fe0a26fa1a00a11cb4d0523783Affected
LinuxLinux	3.14Affected before 3.14Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.114 through 6.12.Not affected 6.18.45 through 6.18.Not affected 7.1.9 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

5161b31dc39a6d6dadc95f298de48a725b73ada8 to before f96c18a766477e5f33d51697963a5c8aed260daeAffected
5161b31dc39a6d6dadc95f298de48a725b73ada8 to before a9e0efcb1125e6b452c648671f15920c4955b681Affected
5161b31dc39a6d6dadc95f298de48a725b73ada8 to before 1beb4dd6a30dea699e98990dd61f892ed1c0985eAffected
5161b31dc39a6d6dadc95f298de48a725b73ada8 to before 29fe74c9aa69d78c1c6a3930f1d9fc5db71a6eedAffected
5161b31dc39a6d6dadc95f298de48a725b73ada8 to before b7949b0a7d998013b7ec8617a0ef5b07cca80be4Affected
5161b31dc39a6d6dadc95f298de48a725b73ada8 to before 8444d66aa6b6e7fe0a26fa1a00a11cb4d0523783Affected

LinuxLinux

3.14Affected
before 3.14Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.114 through 6.12.*Not affected
6.18.45 through 6.18.*Not affected
7.1.9 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.