CVE-2026-53308

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak and a use-after-free issue exist in the max77705 power supply driver. The driver fails to destroy the allocated workqueue during the remove() process, leading to memory leakage. Additionally, an incorrect removal order occurs during probe error paths where the workqueue is destroyed before the interrupt handlers are freed via the devm interface. If an interrupt occurs during this window, the handler attempts to schedule work on the already destroyed workqueue, resulting in the use of freed memory. The issue is further addressed by updating the workqueue to a non-legacy API to remove unnecessary memory reclaim flags and ensuring dev name() is not used directly to avoid potential format string parsing of the percent character.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.