{
  "affected": [
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:14",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.1.10-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "In the Linux kernel, the following vulnerability has been resolved:  regmap: sdw-mbq: don't call an unset readable_reg callback  regmap_sdw_mbq_poll_busy() decides whether to poll the Function Busy bit by calling ctx-\u003ereadable_reg(), which is a straight copy of config-\u003ereadable_reg. That callback is optional: regmap_readable() treats a NULL -\u003ereadable_reg as \"every register is readable\", and drivers rely on that. es9356 and tac5xx2-sdw both build an MBQ regmap without one.  Since commit ca1b11b36d82 (\"regmap: sdw-mbq: Allow defers on undeferrable controls\") the poll runs on every -ENODATA, not only for Controls the driver marked deferrable, so any of those devices answering COMMAND_IGNORED takes the kernel through a NULL function pointer.  Treat a missing callback the way the rest of regmap does and poll.",
  "id": "DEBIAN-CVE-2026-74738",
  "modified": "2026-09-14T16:47:42.649314652Z",
  "published": "2026-08-26T15:16:52.480Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://security-tracker.debian.org/tracker/CVE-2026-74738"
    }
  ],
  "upstream": [
    "CVE-2026-74738"
  ]
}