CVE-2026-74733
In the Linux kernel, the following vulnerability has been resolved:
gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock
Locking is disabled in the regmap config as this driver uses its own
lock. This means that all calls to regmap functions (read or write) must
hold the i2c_lock. The function pca953x_irq_bus_sync_unlock() did not do
this, and it was therefore possible that multiple threads could cause an
incorrect register to be read/written.
A previous patch partly fixed this, but only protected the write to the
interrupt mask register, and not the read from the direction register.
CSIRTS triage
- What
- A locking issue in the pca953x GPIO driver where regmap lock state is not properly managed in the IRQ bus synchronization function.
- Who is affected
- Systems using the pca953x GPIO controller driver.
- Urgency
- Low priority; no active exploitation reported and CVSS score is minimal.
- Action
- Apply kernel patches addressing CVE-2026-74733 when available through distribution updates.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2026-74733
Get an email if CVE-2026-74733 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Low exploitation risk0.17% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 6% of all EPSS-scored CVEs.
Advisory coverage (2)
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2026-74733)