CVE-2026-90394
Description
In the Linux kernel, the following vulnerability has been resolved: power: supply: sc2731_charger: cancel work on remove The USB notifier and initial charger detection can schedule info->work. The remove path unregisters the notifier, but does not cancel queued or running work before the devm-allocated driver data is released. Set the platform drvdata used by remove, then cancel the work after unregistering the notifier. This issue was found by a static analysis tool.
How to fix
- Linux Linuxbb74a5ab30963022981381ea6aee176fd0c7957c, 232e9e946b496e4706e2f34ce4a617460d8ae713, 05c188addc6d1af51e28496e95096f4df9a000e9, 972d88069050d0272b776145b824198b8f899dce, c6df6e0c099086bc553d44410015cc81795070e6, d5266b4c5c77152e386a3a2d9d5244b3b6cbd57a, aab9d81a415c6653b44b057695ebfbba34dc9556, dfc859bb8d332c525872f1a44028137724fa1998 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 8ac1091ed18b4a6cb0dc2cd5653f080736f89392 ≤ v < bb74a5ab30963022981381ea6aee176fd0c7957c, 8ac1091ed18b4a6cb0dc2cd5653f080736f89392 ≤ v < 232e9e946b496e4706e2f34ce4a617460d8ae713, 8ac1091ed18b4a6cb0dc2cd5653f080736f89392 ≤ v < 05c188addc6d1af51e28496e95096f4df9a000e9, 8ac1091ed18b4a6cb0dc2cd5653f080736f89392 ≤ v < 972d88069050d0272b776145b824198b8f899dce, 8ac1091ed18b4a6cb0dc2cd5653f080736f89392 ≤ v < c6df6e0c099086bc553d44410015cc81795070e6, 8ac1091ed18b4a6cb0dc2cd5653f080736f89392 ≤ v < d5266b4c5c77152e386a3a2d9d5244b3b6cbd57a, 8ac1091ed18b4a6cb0dc2cd5653f080736f89392 ≤ v < aab9d81a415c6653b44b057695ebfbba34dc9556, 8ac1091ed18b4a6cb0dc2cd5653f080736f89392 ≤ v < dfc859bb8d332c525872f1a44028137724fa1998, 5.0 | bb74a5ab30963022981381ea6aee176fd0c7957c, 232e9e946b496e4706e2f34ce4a617460d8ae713, 05c188addc6d1af51e28496e95096f4df9a000e9, 972d88069050d0272b776145b824198b8f899dce, c6df6e0c099086bc553d44410015cc81795070e6, d5266b4c5c77152e386a3a2d9d5244b3b6cbd57a, aab9d81a415c6653b44b057695ebfbba34dc9556, dfc859bb8d332c525872f1a44028137724fa1998 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.