Riskcovery

CVE-2026-89468

power: supply: lp8788-charger: fix use-after-free on remove

State
Published
Severity
Not scored
Published
Sep 11, 2026
Updated
Oct 30, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

power: supply: lp8788-charger: fix use-after-free on remove

lp8788_charger_remove() flushes charger_work before unregistering the IRQs. An IRQ thread can queue charger_work after flush_work() has returned. The work can then run after devres frees pchg and dereference it in lp8788_charger_event().

Unregister the IRQs first. free_irq() waits for any running threaded handler, so no handler can queue more work afterwards. Then use cancel_work_sync() to cancel pending work or wait for running work to finish.

This issue was found by an in-house static analysis tool.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 98a2766493589c18c327ae3dad5243b53fcb5f70 to before 8758fe39a993f86998c8071826150b8859902497Affected
  • 98a2766493589c18c327ae3dad5243b53fcb5f70 to before 4e3d3923976a986cc3cf960d13f1264cea8a9bbaAffected
  • 98a2766493589c18c327ae3dad5243b53fcb5f70 to before 88d8eadfad5d9ff967e74090152940bcfa27df69Affected
  • 98a2766493589c18c327ae3dad5243b53fcb5f70 to before b3aa1e9509e1b0a863353356d617fb45d1b6250aAffected
  • 98a2766493589c18c327ae3dad5243b53fcb5f70 to before b4eb6a056b441ba0caedfbfc42cec501acf12f67Affected
  • 98a2766493589c18c327ae3dad5243b53fcb5f70 to before 831c29a12d560f8a3225f43050b3fbb5dfd79c66Affected
LinuxLinux
  • 3.7Affected
  • before 3.7Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.109 through 6.12.*Not affected
  • 6.18.50 through 6.18.*Not affected
  • 7.2.4 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.