12 matches found
DEBIAN-CVE-2026-89471
In the Linux kernel, the following vulnerability has been resolved: power: supply: crosusbpd-charger: bound the EC-reported port count crosusbpdchargerprobe reads two port counts from the EC and uses one of them, numchargerports, as the loop bound when populating a fixed-size array: struct portda...
EUVD-2026-76377
In the Linux kernel, the following vulnerability has been resolved: power: supply: crosusbpd-charger: bound the EC-reported port count crosusbpdchargerprobe reads two port counts from the EC and uses one of them, numchargerports, as the loop bound when populating a fixed-size array: struct portda...
CVE-2026-89462 power: supply: max17040: propagate register read errors
In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: propagate register read errors max17040getvcell and max17040getsoc ignore errors returned by regmapread. When an I2C transfer fails, the uninitialized register value is converted and reported to userspace...
CVE-2026-89465: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: quiesce delayed work before teardown The threaded IRQ handler can queue pwrrdywork, maxchargingtimework and battpresencework. pwrrdywork and battpresencework can also queue maxchargingtimework, while...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100754)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100754 advisory. In the Linux kernel, the following vulnerability has been resolved: power: supply: goldfish: Fix use-after-free in powersupplychanged Using the devm variant for...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414307)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414307 advisory. The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/power/supply/da9150-charger.c if a physically proximate attacker unplugs a...
CVE-2023-52571: Missing Release of Memory after Effective Lifetime
In the Linux kernel, the following vulnerability has been resolved: power: supply: rk817: Fix node refcount leak Dan Carpenter reports that the Smatch static checker warning has found that there is another refcount leak in the probe function. While ofnodeput was added in one of the return paths, ...
The vulnerability of the smb2_probe() function in the drivers/power/supply/qcom_pmi8998_charger.c file of the Linux kernel power supply driver allows a hacker to cause a system failure.
The vulnerability of the smb2probe function in the drivers/power/supply/qcompmi8998charger.c file of the Linux kernel power supply driver is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause a system failure...
An issue was discovered in the Linux kernel before 6.2.9. A use-after-free was found in bq24190_remove in drivers/power/supply/bq24190_charger.c. It could allow a local attacker to crash the system due to a race condition.
...
SUSE CVE-2023-33288
An issue was discovered in the Linux kernel before 6.2.9. A use-after-free was found in bq24190remove in drivers/power/supply/bq24190charger.c. It could allow a local attacker to crash the system due to a race condition...