CVE-2026-74405

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists between the dev pm opp add dynamic() and dev pm opp find freq exact() functions. The issue occurs when a new Operating Performance Point (OPP) is inserted into the list via the opp add() function before its kref is initialized. A concurrent lookup performed by opp table find key() can find this uninitialized OPP and increment its reference count, leading to refcount corruption and a potential premature free of the object.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.