CVE-2026-74734

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the firewire OHCI driver where a NULL pointer dereference can occur within the ar context release() function. This happens during the error handling path of the driver's probe function if pci probe() fails early, such as during MMIO mapping or pcim enable device(). In these cases, the release ohci() function calls ar context release() before ar context init() has been executed, causing the driver to dereference the uninitialized ctx->ohci pointer and leading to a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.