CVE-2026-90026

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the usb: typec: qcom-pmic component where the pdphy stop() function disables IRQs but leaves reset work pending. If the IRQ handler schedules this work immediately before disable irq(), the work may execute after the remove() function frees the associated structure via devm, potentially leading to a use-after-free scenario.

Recommendations Call cancel work sync() after disabling IRQs to ensure pending work is cancelled.