{
  "cveId": "CVE-2026-74734",
  "url": "https://patchblox.com/security/cve/CVE-2026-74734",
  "summary": "CVE-2026-74734 is fixed in linux on 1 platform, first by DEBIAN-CVE-2026-74734, released September 4, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "firewire: ohci: fix NULL pointer dereference in ar_context_release",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  firewire: ohci: fix NULL pointer dereference in ar_context_release  During the error handling path of the driver\u0027s probe function, a NULL pointer dereference can occur in ar_context_release().  When pci_probe() fails early (e.g., if pcim_enable_device() or MMIO mapping fails), the devres cleanup mechanism invokes release_ohci(). This function unconditionally calls ar_context_release() to clean up the asynchronous receive contexts. However, if ar_context_init() was not yet called, ctx-\u003Eohci remains NULL (as the fw_ohci structure is zero-initialized by devres_alloc()).  ar_context_release() immediately dereferences ctx-\u003Eohci to get the dev pointer before checking if the context was actually initialized, leading to a crash:  Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] RIP: 0010:ar_context_release\u002B0x3f/0x380 drivers/firewire/ohci.c:543 Call Trace:  release_ohci\u002B0x3f/0x60 drivers/firewire/ohci.c:3567  release_nodes drivers/base/devres.c:546 [inline]  devres_release_all\u002B0x1a8/0x260 drivers/base/devres.c:576  device_unbind_cleanup drivers/base/dd.c:597 [inline]  really_probe\u002B0x451/0xae0 drivers/base/dd.c:772  To fix this, move the assignment of the dev pointer after the !ctx-\u003Ebuffer check. If ctx-\u003Ebuffer is NULL, it indicates that the context was never successfully initialized and there is nothing to release, safely avoiding the dereference of the uninitialized ctx-\u003Eohci pointer.",
  "published": "2026-08-26T15:16:51Z",
  "severity": "Moderate",
  "cvss": 5.5,
  "epss": 0.00175,
  "epssPercentile": 0.07077,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74734",
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.115-2",
      "fix": "DEBIAN-CVE-2026-74734",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-74734",
      "released": "2026-09-04T01:46:23Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.1.10-1",
      "fix": "DEBIAN-CVE-2026-74734",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-74734",
      "released": "2026-09-04T01:46:23Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}