CVE-2026-74754

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the SCSI core error handling (EH) process. The system checks the shost->eh noresume variable twice during a single error handling iteration: once before calling scsi autopm get host() and again before scsi autopm put host(). If a power management (PM) triggered error path changes the value of shost->eh noresume while the SCSI EH thread is active, the process may skip the autoresume on entry but still execute the runtime PM reference drop on exit. This results in an unmatched runtime PM put, which can lead to a runtime PM usage count underflow.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.