Stellantis Built an Airbag Controller That Holds Grudges. 419,000 Grand Cherokees Have One.

Side airbag deployment is a 12-millisecond decision.^[1] A door-mounted pressure sensor detects intrusion, feeds that signal to the Occupant Restraint Controller, and the ORC fires the side curtain and thorax bags before the occupant's torso has moved three inches laterally. Twelve milliseconds. Faster than a blink. That is how long your Jeep Grand Cherokee has to decide whether physics or nylon gets to your ribcage first.

In 419,035 Grand Cherokees, the computer making that decision has a grudge it cannot drop.^[2]

NHTSA announced on May 29 that Stellantis is recalling 140,130 two-row Grand Cherokees (2022–2026) and 278,905 three-row Grand Cherokee Ls (2023–2025) because a software error in the ORC module causes door airbag pressure sensor faults to remain active for the lifetime of the sensor.^[3] Not until the dealer clears the code. Not until a reboot. Forever. Even if the sensor gets replaced, the ORC's software keeps the old fault flagged as current. Built to remember, it cannot forget.

Brutal in its simplicity: When the ORC sees an active pressure sensor fault during a side impact, it may delay side airbag deployment. Delayed. In a crash type where the gap between the door panel and your skull starts at maybe ten inches and closes to zero in roughly 20 milliseconds. Every millisecond the curtain airbag takes to inflate is a millisecond the door structure absorbs alone.

Stellantis first identified the problem through warranty claims in February 2023.^[4] Thirty-nine months later, on May 14, 2026, the company finally decided to issue a voluntary recall. In between, investigators ruled out door wire-harness routing. They ruled out the sensors themselves. They eventually traced the defect to software that treated every historical fault as a live fault, a design pattern engineers call a "sticky fault." The physical hardware worked, the wiring worked, the sensors worked — the only broken component was a few lines of code in a controller that cannot distinguish between "this sensor failed once in 2023" and "this sensor is failing right now."

During those 39 months of investigation, Stellantis continued building Grand Cherokees with the defective ORC software. Production ran through October 9, 2025.^[3] The Grand Cherokee family sold 202,730 units in 2022, 124,957 in 2023, and approximately 161,693 in 2024.^[5] Nearly half a million vehicles rolled off the line and into driveways while Stellantis was still figuring out why the airbag controller held grudges against repaired sensors.

FARS data offers the grim backdrop: the Grand Cherokee recorded 1,161 occupant deaths across model years 1993–2022 in the 2014–2023 FARS dataset, averaging 116 fatal crashes per year across the entire fleet.^[6] Side-impact collisions account for approximately 23 percent of passenger vehicle fatalities nationally.^[7] Apply that proportion to the Grand Cherokee fleet and you get roughly 27 side-impact fatal crashes per year. For the affected 2022–2026 model years, the FARS sample is still small (seven deaths from MY 2022 as of the latest data), but these vehicles are aging into the highest-mileage years when exposure climbs and the probability of sensor faults accumulates with it.

Before the ORC fault sets, drivers get no warning. None. No light, no chime, no error message. The sensor fails silently, the ORC logs a sticky fault, and the side airbags quietly become less reliable. Only after the fault is detected does the airbag warning light illuminate and a chime sound at each ignition cycle.^[3] The gap between failure and detection is the vulnerability window, and neither Stellantis nor NHTSA has quantified how long it lasts.

For context, consider what else happened on May 29. Hours before the Stellantis recall, Honda recalled 98,892 vehicles because a cracked seat weight sensor causes airbags to deploy on children and infants when they should suppress.^[8] Same day, same safety system, opposite catastrophic failure. One manufacturer's airbags fire when they must not. Another manufacturer's airbags hesitate when they must not. A combined 518,000 vehicles whose occupant protection systems fail in mutually exclusive directions, on the same Friday afternoon in May.

Limitations: FARS data runs through 2023, so the 2022–2026 model years have minimal fatal crash exposure in the dataset. The 23-percent side-impact proportion is a national average across all passenger vehicles; the Grand Cherokee's specific side-impact share may differ due to its ride height, weight class (4,500–5,200 lbs), and rollover propensity. NHTSA has not linked any specific fatality or injury to the ORC ghost-fault defect. The "delay" in airbag deployment has not been quantified publicly; whether it means 5 milliseconds or 500 milliseconds changes the real-world injury calculus dramatically.

Strongest counterargument: Stellantis could argue that the 39-month timeline reflects engineering diligence, not negligence. They ruled out multiple hypotheses before isolating the software defect, avoiding a premature recall that targeted the wrong component. No injuries or fatalities have been confirmed as linked to this defect. The fix is a free software update, not a hardware replacement, which suggests the deployment delay may be marginal rather than catastrophic. A vehicle whose side airbags deploy 20 milliseconds late may still provide substantial protection compared to a vehicle with no side airbags at all. Fair point. But "substantial protection compared to none" is not the standard written in FMVSS 214. The standard is timely deployment, and the ORC's sticky fault compromises that — Stellantis knew the faults existed for three years before it knew why.

What you should do: If you own a 2022–2026 Jeep Grand Cherokee or a 2023–2025 Grand Cherokee L, check your VIN at nhtsa.gov/recalls. If your airbag warning light is on and chimes at startup, do not ignore it. Schedule the free software update at your dealer. Until the update is applied, the ORC may be holding a grudge against a sensor that works fine, and your side airbags may be slower to deploy in the crash type where milliseconds decide outcomes.