CVE-2026-89473
Description
In the Linux kernel, the following vulnerability has been resolved: power: supply: bq25890: Fix power_supply reference leak bq25890_fw_probe() acquires a reference to a secondary charger using power_supply_get_by_name(), but the reference is not released on later probe failures or on driver detach. In particular, failures after bq25890_fw_probe() returns successfully, such as a failure in bq25890_hw_init(), also leak the reference. Register a device-managed cleanup action immediately after acquiring the secondary charger. This releases the reference on all subsequent probe failures and on driver detach. Found by code review.
How to fix
- Linux Linux976c10d883a02968f3f58be0cee499d1fd2ba68a, 81b558afda9321c1a70971a39071d156f3e26950, 238320ad029a3eedabb86286a28cab55bca629b9, 58f1025eca92734eadc063715b98f62538286468, 863c32a83e4235eb0cbf6106f2b124e645302156 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | d54bf877fd878ee45cbc88d399fb98b0b1c4484d ≤ v < 976c10d883a02968f3f58be0cee499d1fd2ba68a, d54bf877fd878ee45cbc88d399fb98b0b1c4484d ≤ v < 81b558afda9321c1a70971a39071d156f3e26950, d54bf877fd878ee45cbc88d399fb98b0b1c4484d ≤ v < 238320ad029a3eedabb86286a28cab55bca629b9, d54bf877fd878ee45cbc88d399fb98b0b1c4484d ≤ v < 58f1025eca92734eadc063715b98f62538286468, d54bf877fd878ee45cbc88d399fb98b0b1c4484d ≤ v < 863c32a83e4235eb0cbf6106f2b124e645302156, 6.3 | 976c10d883a02968f3f58be0cee499d1fd2ba68a, 81b558afda9321c1a70971a39071d156f3e26950, 238320ad029a3eedabb86286a28cab55bca629b9, 58f1025eca92734eadc063715b98f62538286468, 863c32a83e4235eb0cbf6106f2b124e645302156 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.