CVE-2026-74733

CVE-2026-74733

High · published August 22, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
6.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock

Locking is disabled in the regmap config as this driver uses its own

lock. This means that all calls to regmap functions (read or write) must

hold the i2c_lock. The function pca953x_irq_bus_sync_unlock() did not do

this, and it was therefore possible that multiple threads could cause an

incorrect register to be read/written.

A previous patch partly fixed this, but only protected the write to the

interrupt mask register, and not the read from the direction register.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00175 · 6.6th percentile
Published
2026-08-22T20:16Z
References (5)
EPSS history
Timeline
  • 22 AUG 15:33Z
    gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock
    cvelistv5