What is CVE-2026-74461?
This vulnerability in the Linux kernel's I2C IMX driver arises because `i2c_imx_unreg_slave()` does not cancel the hrtimer before clearing the slave pointer to NULL. A pending interrupt might trigger the hrtimer after the pointer is NULL, leading to a use-after-free condition. Updating the kernel is recommended.
Azərbaycanca: Linux kernel-də I2C IMX sürücüsündə aşkarlanan bu boşluq, `i2c_imx_unreg_slave()` funksiyasında slave pointer null edilməzdən əvvəl hrtimer-in ləğv edilməməsi ilə bağlıdır. Gözləyən bir interrupt hrtimer-i işə saldıqda, artıq null olan pointer-ə istinad (use-after-free) baş verə bilər. Nüvəni yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-416
FAQ2
In which Linux kernel component was CVE-2026-74461 discovered?
This vulnerability was discovered in the I2C IMX driver of the Linux kernel.
What type of memory corruption occurs when CVE-2026-74461 is exploited?
When exploited, this vulnerability leads to a use-after-free memory corruption.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.