CVE-2026-89468
Description
In the Linux kernel, the following vulnerability has been resolved: power: supply: lp8788-charger: fix use-after-free on remove lp8788_charger_remove() flushes charger_work before unregistering the IRQs. An IRQ thread can queue charger_work after flush_work() has returned. The work can then run after devres frees pchg and dereference it in lp8788_charger_event(). Unregister the IRQs first. free_irq() waits for any running threaded handler, so no handler can queue more work afterwards. Then use cancel_work_sync() to cancel pending work or wait for running work to finish. This issue was found by an in-house static analysis tool.
How to fix
- Linux Linux8758fe39a993f86998c8071826150b8859902497, 4e3d3923976a986cc3cf960d13f1264cea8a9bba, 88d8eadfad5d9ff967e74090152940bcfa27df69, b3aa1e9509e1b0a863353356d617fb45d1b6250a, b4eb6a056b441ba0caedfbfc42cec501acf12f67, 831c29a12d560f8a3225f43050b3fbb5dfd79c66 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 98a2766493589c18c327ae3dad5243b53fcb5f70 ≤ v < 8758fe39a993f86998c8071826150b8859902497, 98a2766493589c18c327ae3dad5243b53fcb5f70 ≤ v < 4e3d3923976a986cc3cf960d13f1264cea8a9bba, 98a2766493589c18c327ae3dad5243b53fcb5f70 ≤ v < 88d8eadfad5d9ff967e74090152940bcfa27df69, 98a2766493589c18c327ae3dad5243b53fcb5f70 ≤ v < b3aa1e9509e1b0a863353356d617fb45d1b6250a, 98a2766493589c18c327ae3dad5243b53fcb5f70 ≤ v < b4eb6a056b441ba0caedfbfc42cec501acf12f67, 98a2766493589c18c327ae3dad5243b53fcb5f70 ≤ v < 831c29a12d560f8a3225f43050b3fbb5dfd79c66, 3.7 | 8758fe39a993f86998c8071826150b8859902497, 4e3d3923976a986cc3cf960d13f1264cea8a9bba, 88d8eadfad5d9ff967e74090152940bcfa27df69, b3aa1e9509e1b0a863353356d617fb45d1b6250a, b4eb6a056b441ba0caedfbfc42cec501acf12f67, 831c29a12d560f8a3225f43050b3fbb5dfd79c66 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.