CVE-2026-89475

A flaw was found in the Linux kernel. A use-after-free vulnerability exists in the bq24257 power supply driver. This issue occurs when the STAT-pin interrupt handler attempts to reschedule work and access memory that has already been freed during the device removal process. This can lead to syste...

CVE-2026-89475

A use-after-free vulnerability in the Linux kernel's bq24257 power supply driver is triggered during device removal. The STAT-pin interrupt is devm-managed and stays armed until devm cleanup runs after remove() returns. While remove() cancels the iilimit_setup_work, the threaded interrupt handler...

EUVD-2026-76381

In the Linux kernel, the following vulnerability has been resolved: power: supply: bq24257: fix use-after-free on remove The STAT-pin interrupt is devm-managed, so it stays armed until the devm cleanup that runs after remove returns. remove cancels bq-iilimitsetupwork while the threaded handler c...

PT-2026-90191

In the Linux kernel, the following vulnerability has been resolved: power: supply: bq24257: fix use-after-free on remove The STAT-pin interrupt is devm-managed, so it stays armed until the devm cleanup that runs after remove returns. remove cancels bq-iilimit setup work while the threaded handler...