SB20260815147 - Use-after-free in Linux kernel watchdog driver
Published: August 15, 2026
Security Bulletin ID
SB20260815147
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Use-after-free (CVE-ID: CVE-2026-74329)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to a use-after-free in watchdog_pm_notifier in the Linux kernel watchdog subsystem when processing suspend and resume notifications after watchdog device unregistration. A local user can trigger a suspend or resume event after unregistering a watchdog device to cause a denial of service.
Only watchdog devices with WDOG_NO_PING_ON_SUSPEND set are affected.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/298821692d447c2f7b1bc9ef41cd88a31bf56436
- https://git.kernel.org/stable/c/5d9b58ec6f5de5e159a570d419b1b08b3b9f854b
- https://git.kernel.org/stable/c/89184909634e50d086d86d8a0c03fc86fe8d889f
- https://git.kernel.org/stable/c/a298c7302ee9584a7a1ac1e8acbede8d98ab51a4
- https://git.kernel.org/stable/c/c70b5bb6f04f77ef90e047d7edc2f476e206909f
- https://git.kernel.org/stable/c/cd2d1b1f99308f7680d75a377daaff363f1cc736
- https://git.kernel.org/stable/c/e690afea5c876a4abfa2978c6a664460ed7d1217