https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 11:30:10 +0000 https://vulnerability.circl.lu/vuln/cve-2026-89464 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>power: supply: twl4030_charger: cancel workers via devm</p> <p>bci is devm-allocated. Two workers (bci-&gt;work and bci-&gt;current_worker) dereference it. twl4030_bci_remove() disables charging and masks interrupts. It cancels neither worker. A worker pending at remove() can run after devm frees bci.</p> <p>The USB transceiver comes from devm_usb_get_phy_by_node(). devm unregisters its notifier only after remove() returns. A cancel_work_sync() in remove() can then race a notifier reschedule. devm_work_autocancel() and devm_delayed_work_autocancel() avoid that. They cancel the workers during devm release, before bci is freed.</p> <p>The current_worker is registered first, since devm will cancel in reverse order and bci-&gt;work can reschedule current_worker.</p> <p>[Move comment about order into the commit message]</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>power: supply: twl4030_charger: cancel workers via devm</p> <p>bci is devm-allocated. Two workers (bci-&gt;work and bci-&gt;current_worker) dereference it. twl4030_bci_remove() disables charging and masks interrupts. It cancels neither worker. A worker pending at remove() can run after devm frees bci.</p> <p>The USB transceiver comes from devm_usb_get_phy_by_node(). devm unregisters its notifier only after remove() returns. A cancel_work_sync() in remove() can then race a notifier reschedule. devm_work_autocancel() and devm_delayed_work_autocancel() avoid that. They cancel the workers during devm release, before bci is freed.</p> <p>The current_worker is registered first, since devm will cancel in reverse order and bci-&gt;work can reschedule current_worker.</p> <p>[Move comment about order into the commit message]</p> https://vulnerability.circl.lu/vuln/cve-2026-89464