EUVD-2026-76380

In the Linux kernel, the following vulnerability has been resolved: power: supply: bq256xx: drain usbwork before freeing the charger The USB-PHY notifier queues usbwork, whose handler calls powersupplychangedbq-charger. The reset devm action only unregisters the notifier and was registered before...

CVE-2026-89474

CVE-2026-89474 is a use-after-free in the Linux kernel's bq256xx power supply driver. On driver removal, the USB-PHY notifier queues a work item (usb_work) whose handler calls power_supply_changed(bq->charger). Because the reset devm action was registered before the power supplies, the devm un...