Security Advisory

CVE-2026-89468

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-11 19:43:27

Last updated 2026-09-11 19:43:27

Assigner Linux

CVSS score not scored

State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: power: supply: lp8788-charger: fix use-after-free on remove lp8788_charger_remove() flushes charger_work before unregistering the IRQs. An IRQ thread can queue charger_work after flush_work() has returned. The work can then run after devres frees pchg and dereference it in lp8788_charger_event(). Unregister the IRQs first. free_irq() waits for any running threaded handler, so no handler can queue more work afterwards. Then use cancel_work_sync() to cancel pending work or wait for running work to finish. This issue was found by an in-house static analysis tool.

← Browse all CVEs View on cve.org ↗