EUVD-2026-76374

In the Linux kernel, the following vulnerability has been resolved: power: supply: lp8788-charger: fix use-after-free on remove lp8788chargerremove flushes chargerwork before unregistering the IRQs. An IRQ thread can queue chargerwork after flushwork has returned. The work can then run after devr...

CVE-2026-89468 power: supply: lp8788-charger: fix use-after-free on remove

In the Linux kernel, the following vulnerability has been resolved: power: supply: lp8788-charger: fix use-after-free on remove lp8788chargerremove flushes chargerwork before unregistering the IRQs. An IRQ thread can queue chargerwork after flushwork has returned. The work can then run after devr...

CVE-2026-89468

This use-after-free vulnerability affects the lp8788-charger driver in the Linux kernel. During device removal, lp8788_charger_remove() flushed charger_work before unregistering IRQs, allowing an IRQ thread to queue work after the flush completed. That work could then run after devres freed the p...

CVE-2026-89468

In the Linux kernel, the following vulnerability has been resolved: power: supply: lp8788-charger: fix use-after-free on remove lp8788chargerremove flushes chargerwork before unregistering the IRQs. An IRQ thread can queue chargerwork after flushwork has returned. The work can then run after devr...

CVE-2026-89468: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: power: supply: lp8788-charger: fix use-after-free on remove lp8788chargerremove flushes chargerwork before unregistering the IRQs. An IRQ thread can queue chargerwork after flushwork has returned. The work can then run after devr...

PT-2026-96374

In the Linux kernel, the following vulnerability has been resolved: power: supply: cros usbpd-charger: bound the EC-reported port count cros usbpd charger probe reads two port counts from the EC and uses one of them, num charger ports, as the loop bound when populating a fixed-size array: struct...

PT-2026-90180

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the twl4030 charger power supply component where the bci structure is allocated via devm. Two workers, bci-work and bci-current worker, dereference this structure. The...

PT-2026-90188

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the charger-manager component of the power supply subsystem. The problem occurs because charger manager remove and the err reg extcon probe error path...

PT-2026-90186

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The cros usbpd-charger driver probe iterates based on the raw charger port count provided by the embedded controller. Because the driver only checks against the number of USB PD ports...

CVE-2026-89471: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: power: supply: crosusbpd-charger: bound the EC-reported port count crosusbpdchargerprobe reads two port counts from the EC and uses one of them, numchargerports, as the loop bound when populating a fixed-size array: struct portda...

PT-2026-90187

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab out-of-bounds write exists in the cros usbpd charger probe function. The issue occurs because the function uses num charger ports, a value reported by the Embedded Controller EC, ...

CVE-2026-89472: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: register regulators before exposing sysfs chargermanagerremove and the errregextcon probe error path free each charger regulator with regulatorput before tearing down the powersupply sysfs entries...

PT-2026-90184

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the lp8788-charger component. The lp8788 charger remove function flushes charger work before unregistering IRQs, which allows an IRQ thread to queue...

PT-2026-96495

In the Linux kernel, the following vulnerability has been resolved: power: supply: lp8788-charger: fix use-after-free on remove lp8788 charger remove flushes charger work before unregistering the IRQs. An IRQ thread can queue charger work after flush work has returned. The work can then run after...

PT-2026-96588

In the Linux kernel, the following vulnerability has been resolved: power: supply: cros usbpd: Limit port counts to EC USB PD MAX PORTS Currently the cros usbpd-charger driver probe iterates based on raw charger port count returned by the embedded controller. The only check is against the number ...

Linux kernel Power Management Driver Max77705 Charger Probe

The vulnerability of the max77705chargerprobe function in the drivers/power/supply/max77705charger.c file of the Linux kernel’s power management driver relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

CVE-2026-80711

A flaw was found in the Linux kernel's power supply subsystem, specifically within the MAX17040 fuel gauge driver. When the MAX17040 fuel gauge operates without a registered charger status supplier, the driver fails to properly handle this missing information. This oversight can result in userspa...

CVE-2026-80711 power: supply: max17040: handle missing status supplier

In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: handle missing status supplier MAX17040 does not report charger state itself, so the driver forwards POWERSUPPLYPROPSTATUS to a supplier power supply. If no supplier is registered,...

SUSE CVE-2026-72182

In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: fix refcount leak in isfullcharged In isfullcharged, powersupplygetbyname is called to obtain a reference to the fuelgauge power supply. If the voltage check uV = desc-fullbattuV succeeds, the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104544)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104544 advisory. In the Linux kernel, the following vulnerability has been resolved: afs: Fix netns teardown to cancel the preallocation charger Fix the teardown of an afs network...