CVE-2026-89585

auxdisplay: charlcd: cancel backlight work on registration failure

State: Published
Severity: 7.8 High
Published: Sep 11, 2026
Updated: Oct 19, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

auxdisplay: charlcd: cancel backlight work on registration failure

With CONFIG_CHARLCD_BL_FLASH, charlcd_init() schedules bl_work before charlcd_register() calls misc_register(). If registration fails, the caller frees the charlcd object while delayed work still contains its address.

Add charlcd_deinit() to cancel the delayed work and turn the backlight off. Use it for both registration rollback and normal unregistration.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	39f8ea46724efbed3ca021863a22337c31be264c to before cd97b3c68fe3c06c8067cc59d7dff976c5b7ea04Affected 39f8ea46724efbed3ca021863a22337c31be264c to before 22586432c1aba89d9bd33f3173408dac830f220bAffected 39f8ea46724efbed3ca021863a22337c31be264c to before 6eaed64a32e550daf0dc9549742b3ab9e41d984fAffected 39f8ea46724efbed3ca021863a22337c31be264c to before fe7ba73dde94c5f413b1588cd444b49105015ddaAffected 39f8ea46724efbed3ca021863a22337c31be264c to before 84858671842ae5857b9ed1202b62f9045373dcd1Affected 39f8ea46724efbed3ca021863a22337c31be264c to before ff2fb3c1e60cb247ea3e28c0ea0bea81c18f7755Affected 39f8ea46724efbed3ca021863a22337c31be264c to before e3e3bf40916c1e810df03958cfa7ba6883cdce79Affected
LinuxLinux	4.12Affected before 4.12Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.109 through 6.12.Not affected 6.18.50 through 6.18.Not affected 7.2.4 through 7.2.Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

39f8ea46724efbed3ca021863a22337c31be264c to before cd97b3c68fe3c06c8067cc59d7dff976c5b7ea04Affected
39f8ea46724efbed3ca021863a22337c31be264c to before 22586432c1aba89d9bd33f3173408dac830f220bAffected
39f8ea46724efbed3ca021863a22337c31be264c to before 6eaed64a32e550daf0dc9549742b3ab9e41d984fAffected
39f8ea46724efbed3ca021863a22337c31be264c to before fe7ba73dde94c5f413b1588cd444b49105015ddaAffected
39f8ea46724efbed3ca021863a22337c31be264c to before 84858671842ae5857b9ed1202b62f9045373dcd1Affected
39f8ea46724efbed3ca021863a22337c31be264c to before ff2fb3c1e60cb247ea3e28c0ea0bea81c18f7755Affected
39f8ea46724efbed3ca021863a22337c31be264c to before e3e3bf40916c1e810df03958cfa7ba6883cdce79Affected

LinuxLinux

4.12Affected
before 4.12Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.109 through 6.12.*Not affected
6.18.50 through 6.18.*Not affected
7.2.4 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.