PT-2026-43746
CVE-2026-45879
·
Published
2025-12-21
·
Updated
2026-10-13
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A race condition exists in the bq25980 power supply driver. When the
devm variant is used to request an IRQ before allocating or registering the power supply handle, the handle is deallocated before the interrupt handler during removal. This allows an interrupt to fire after the power supply handle is freed but before the IRQ handler is unregistered, leading to a use-after-free scenario when the IRQ handler calls the power supply changed() function. Additionally, during the probe() process, an interrupt could fire before the power supply handle is registered, resulting in the use of an uninitialized handle within power supply changed(). These issues can cause system crashes or silent memory corruption.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾