CVE-2026-74407

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the Linux kernel affecting PCI/MHI-based devices. A kernel crash can occur during a reboot if it overlaps with WLAN firmware crash recovery, known as Subsystem Reset (SSR). The crash results from a NULL pointer dereference in the MHI teardown path while freeing DMA-backed MHI contexts. This happens because the shutdown path, involving the functions ath11k pci shutdown() and ath11k pci power down(), runs asynchronously and can race with the SSR recovery flow driven by the MHI RDDM callback, which queues reset work to power-cycle the device via ath11k hif power down() and ath11k hif power up().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.