CVE-2026-74733
In the Linux kernel, the following vulnerability has been resolved: gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock Locking is disabled in the regmap config as this driver uses its own lock. This means that all calls to regmap functions (read or write) must hold the i2c_lock. The function pca953x_irq_bus_sync_unlock() did not do this, and it was therefore possible that multiple threads could cause an incorrect register to be read/written. A previous patch partly fixed this, but only protected the write to the interrupt mask register, and not the read from the direction register.
Affected versions
Linux kernel versions
6.1.101,
6.6.42,
6.9.11,
6.10
and later are affected. Fixed in
7.1.9,
7.2
and their respective stable series.
References
2 totalFrequently asked questions
-
What is CVE-2026-74733?
CVE-2026-74733 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.1.101 onward and has been patched in 7.1.9 and 7.2. CVE-2026-74733 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-74733?
Yes. CVE-2026-74733 has been patched. Fixed versions include 7.1.9 and 7.2. If you are running Linux kernel 6.1.101 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-74733 actively exploited?
No. CVE-2026-74733 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.