CVE-2026-74264Medium· 4.7▾ SunlitA flaw was found in the Linux kernel's network watchdog component. A race condition in the reference count tracking mechanism, specifically between netdev_watchdog_up() and dev_watchdog(), allows for concurrent overwriting or freeing of re…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 25.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the vendor's CSAF advisory record, not NVD.
Exploit-prediction probability, daily snapshots since Oct 16.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.2%
0.2% → 0.2%
Last analysed / modified upstream
7.8 → 4.7
high → medium
A flaw was found in the Linux kernel's network watchdog component. A race condition in the reference count tracking mechanism, specifically between netdev_watchdog_up() and dev_watchdog(), allows for concurrent overwriting or freeing of reference tracking information. This can lead to list corruption and a kernel crash, resulting in a Denial of Service (DoS) for the affected system.
kernel: net: watchdog: fix refcount tracking races — rated Moderate by Red Hat. Released 2026-08-15, updated 2026-10-26.
Affected:
No fix planned:
Not affected:
Out of support scope
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-109729Medium· 5.4Use-after-free in the JavaScript Engine: JIT component
CVE-2026-64564Critical· 9.8In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transport in DEL-IP processing sctp_process_asconf() caches the transport the ASCONF chunk is processed against in asconf->transport …
CVE-2026-53384High· 7.0In the Linux kernel, the following vulnerability has been resolved: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails dw8250_probe() registers the 8250 port via serial8250_register_8250_port() and then, if the devi…
CVE-2026-80764Medium· 4.7kernel: Bluetooth: hci_event: fix LE list UAF on reset (CVE-2026-80764)
CVE-2026-64554High· 7.0kernel: netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() (CVE-2026-64554)
CVE-2026-64475High· 7.0kernel: vfio/pci: Release the VGA arbiter client on register_device() failure (CVE-2026-64475)