CVE-2026-74706

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the bnge aux dev release() function during auxiliary device setup. If the allocation of auxr dev fails, the error path triggers auxiliary device uninit(), which calls the release callback. The callback attempts to access aux priv->auxr dev->pdev to find the parent bnge dev; however, because auxr dev was not allocated, this operation results in a NULL pointer exception.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.