High 7.8Published Aug 22, 2026

CVE-2026-74687watchdog: at91sam9_wdt: prevent timer rearm during teardown

Updated under an hour ago (Oct 28, 2026, 5:40 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: watchdog: at91sam9_wdt: prevent timer rearm during teardown at91_ping() rearms the watchdog timer from its callback. timer_delete() neither waits for a running callback nor prevents it from rearming the timer, so probe failure or driver removal can leave the timer accessing the devm-allocated at91wdt after it has been freed. Use timer_shutdown_sync() on both teardown paths. It waits for a running callback and rejects any attempt by the callback to rearm the timer.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 5161b31dc39a6d6dadc95f298de48a725b73ada8 before a9e0efcb1125e6b452c648671f15920c4955b681; 5161b31dc39a6d6dadc95f298de48a725b73ada8 builds before 1beb4dd6a30dea699e98990dd61f892ed1c0985e; 5161b31dc39a6d6dadc95f298de48a725b73ada8 builds before 29fe74c9aa69d78c1c6a3930f1d9fc5db71a6eed; from 5161b31dc39a6d6dadc95f298de48a725b73ada8 before b7949b0a7d998013b7ec8617a0ef5b07cca80be4; from 5161b31dc39a6d6dadc95f298de48a725b73ada8 before 8444d66aa6b6e7fe0a26fa1a00a11cb4d0523783	CNA record

References

References

https://git.kernel.org/stable/c/a9e0efcb1125e6b452c648671f15920c4955b681
https://git.kernel.org/stable/c/1beb4dd6a30dea699e98990dd61f892ed1c0985e
https://git.kernel.org/stable/c/29fe74c9aa69d78c1c6a3930f1d9fc5db71a6eed
https://git.kernel.org/stable/c/b7949b0a7d998013b7ec8617a0ef5b07cca80be4
https://git.kernel.org/stable/c/8444d66aa6b6e7fe0a26fa1a00a11cb4d0523783

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.