CVE-2026-90026

usb: typec: qcom-pmic: cancel reset_work on stop

State: Published
Severity: 7.8 High
Published: Sep 16, 2026
Updated: Oct 19, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: qcom-pmic: cancel reset_work on stop

pdphy_stop() disables IRQs but leaves reset_work pending. If the IRQ handler schedules it just before disable_irq(), the work runs after remove() frees the struct via devm.

Call cancel_work_sync() after disabling IRQs to close the window.

This issue was found by an in-house static analysis tool.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a4422ff221429c600c3dc5d0394fb3738b89d040 to before 0b69b166852dbf1f9532b22bd49f502e5970eb95Affected a4422ff221429c600c3dc5d0394fb3738b89d040 to before b9a7eed472edbfa8dec0fdeafd5e796550a8a8b7Affected a4422ff221429c600c3dc5d0394fb3738b89d040 to before d4e00a1eb39174e25ef759b8fb1111bba8e87b1eAffected a4422ff221429c600c3dc5d0394fb3738b89d040 to before 52d556f08547733948cc40b8b11e6b68dccee7b2Affected a4422ff221429c600c3dc5d0394fb3738b89d040 to before 7b0df6efd143f8085bdb68778a013a46f1349913Affected
LinuxLinux	6.5Affected before 6.5Not affected 6.6.157 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.51 through 6.18.Not affected 7.2.5 through 7.2.Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

a4422ff221429c600c3dc5d0394fb3738b89d040 to before 0b69b166852dbf1f9532b22bd49f502e5970eb95Affected
a4422ff221429c600c3dc5d0394fb3738b89d040 to before b9a7eed472edbfa8dec0fdeafd5e796550a8a8b7Affected
a4422ff221429c600c3dc5d0394fb3738b89d040 to before d4e00a1eb39174e25ef759b8fb1111bba8e87b1eAffected
a4422ff221429c600c3dc5d0394fb3738b89d040 to before 52d556f08547733948cc40b8b11e6b68dccee7b2Affected
a4422ff221429c600c3dc5d0394fb3738b89d040 to before 7b0df6efd143f8085bdb68778a013a46f1349913Affected

LinuxLinux

6.5Affected
before 6.5Not affected
6.6.157 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.51 through 6.18.*Not affected
7.2.5 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.