CVE-2026-74437

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A deadlock occurs in the uvcvideo module when a UVC camera utilizes an asynchronous control. The issue arises when the uvc status stop() function is called from async ctrl.work through the following execution path: uvc ctrl status event work() -> uvc ctrl status event() -> uvc ctrl clear handle() -> uvc pm put() -> uvc status put() -> uvc status stop(). Within this sequence, the cancel work sync() function is invoked, which waits for uvc ctrl status event work to complete, resulting in a deadlock because the function is already executing that specific work.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.