0.0
NA
CVE-2026-74329
watchdog: unregister PM notifier on watchdog unregister
Description

In the Linux kernel, the following vulnerability has been resolved: watchdog: unregister PM notifier on watchdog unregister watchdog_register_device() registers wdd->pm_nb when WDOG_NO_PING_ON_SUSPEND is set, but watchdog_unregister_device() does not remove it. This leaves an embedded notifier block on the PM notifier chain after the watchdog device has been unregistered. A later suspend/resume notification can then call watchdog_pm_notifier() with a stale watchdog_device pointer, or at minimum after wdd->wd_data has been cleared by watchdog_dev_unregister(). Unregister the PM notifier before tearing down the watchdog device.

INFO

Published Date :

Aug. 15, 2026, 6:22 a.m.

Last Modified :

Aug. 15, 2026, 6:22 a.m.

Remotely Exploit :

No

Source :

416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Products

The following products are affected by CVE-2026-74329 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

No affected product recoded yet

Solution
Ensure PM notifiers are unregistered before device teardown.
  • Unregister PM notifier before watchdog device teardown.
  • Apply kernel patches for watchdog PM notifier handling.
  • Update the Linux kernel to the latest secure version.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-74329 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-74329 weaknesses.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2026-74329 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2026-74329 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Aug. 15, 2026

    Action Type Old Value New Value
    Added Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3', 'lessThan': 'cd2d1b1f99308f7680d75a377daaff363f1cc736', 'versionType': 'git'}, {'status': 'affected', 'version': '60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3', 'lessThan': '5d9b58ec6f5de5e159a570d419b1b08b3b9f854b', 'versionType': 'git'}, {'status': 'affected', 'version': '60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3', 'lessThan': '89184909634e50d086d86d8a0c03fc86fe8d889f', 'versionType': 'git'}, {'status': 'affected', 'version': '60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3', 'lessThan': 'e690afea5c876a4abfa2978c6a664460ed7d1217', 'versionType': 'git'}, {'status': 'affected', 'version': '60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3', 'lessThan': '298821692d447c2f7b1bc9ef41cd88a31bf56436', 'versionType': 'git'}, {'status': 'affected', 'version': '60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3', 'lessThan': 'c70b5bb6f04f77ef90e047d7edc2f476e206909f', 'versionType': 'git'}, {'status': 'affected', 'version': '60bcd91aafd22ef62cef9ae2037fa2e1d4da2fb3', 'lessThan': 'a298c7302ee9584a7a1ac1e8acbede8d98ab51a4', 'versionType': 'git'}], 'programFiles': ['drivers/watchdog/watchdog_core.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '5.15'}, {'status': 'unaffected', 'version': '0', 'lessThan': '5.15', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '5.15.212', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.178', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.145', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.97', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.40', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.5', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2-rc1', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/watchdog/watchdog_core.c'], 'defaultStatus': 'affected'}]
    Added Description In the Linux kernel, the following vulnerability has been resolved: watchdog: unregister PM notifier on watchdog unregister watchdog_register_device() registers wdd->pm_nb when WDOG_NO_PING_ON_SUSPEND is set, but watchdog_unregister_device() does not remove it. This leaves an embedded notifier block on the PM notifier chain after the watchdog device has been unregistered. A later suspend/resume notification can then call watchdog_pm_notifier() with a stale watchdog_device pointer, or at minimum after wdd->wd_data has been cleared by watchdog_dev_unregister(). Unregister the PM notifier before tearing down the watchdog device.
    Added Reference https://git.kernel.org/stable/c/298821692d447c2f7b1bc9ef41cd88a31bf56436
    Added Reference https://git.kernel.org/stable/c/5d9b58ec6f5de5e159a570d419b1b08b3b9f854b
    Added Reference https://git.kernel.org/stable/c/89184909634e50d086d86d8a0c03fc86fe8d889f
    Added Reference https://git.kernel.org/stable/c/a298c7302ee9584a7a1ac1e8acbede8d98ab51a4
    Added Reference https://git.kernel.org/stable/c/c70b5bb6f04f77ef90e047d7edc2f476e206909f
    Added Reference https://git.kernel.org/stable/c/cd2d1b1f99308f7680d75a377daaff363f1cc736
    Added Reference https://git.kernel.org/stable/c/e690afea5c876a4abfa2978c6a664460ed7d1217
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.