CVE-2026-74329

Summary

In the Linux kernel, the following vulnerability has been resolved:

watchdog: unregister PM notifier on watchdog unregister

watchdog_register_device() registers wdd->pm_nb when WDOG_NO_PING_ON_SUSPEND is set, but watchdog_unregister_device() does not remove it. This leaves an embedded notifier block on the PM notifier chain after the watchdog device has been unregistered.

A later suspend/resume notification can then call watchdog_pm_notifier() with a stale watchdog_device pointer, or at minimum after wdd->wd_data has been cleared by watchdog_dev_unregister().

Unregister the PM notifier before tearing down the watchdog device.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3 < cd2d1b1f99308f7680d75a377daaff363f1cc736affected
LinuxLinux60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3 < 5d9b58ec6f5de5e159a570d419b1b08b3b9f854baffected
LinuxLinux60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3 < 89184909634e50d086d86d8a0c03fc86fe8d889faffected
LinuxLinux60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3 < e690afea5c876a4abfa2978c6a664460ed7d1217affected
LinuxLinux60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3 < 298821692d447c2f7b1bc9ef41cd88a31bf56436affected
LinuxLinux60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3 < c70b5bb6f04f77ef90e047d7edc2f476e206909faffected
LinuxLinux60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3 < a298c7302ee9584a7a1ac1e8acbede8d98ab51a4affected
LinuxLinux5.15affected
LinuxLinux0 < 5.15unaffected
LinuxLinux5.15.212 <= 5.15.*unaffected
LinuxLinux6.1.178 <= 6.1.*unaffected
LinuxLinux6.6.145 <= 6.6.*unaffected
LinuxLinux6.12.97 <= 6.12.*unaffected
LinuxLinux6.18.40 <= 6.18.*unaffected
LinuxLinux7.1.5 <= 7.1.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References