PT-2026-43746 · Linux+1 · Linux Kernel+1
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A race condition exists in the bq25980 power supply driver. When the
devm variant is used to request an IRQ before allocating or registering the power supply handle, the handle is deallocated before the interrupt handler during removal. This allows an interrupt to fire after the power supply handle is freed but before the IRQ handler is unregistered, leading to a use-after-free scenario when the IRQ handler calls the power supply changed() function. Additionally, during the probe() process, an interrupt could fire before the power supply handle is registered, resulting in the use of an uninitialized handle within power supply changed(). These issues can cause system crashes or silent memory corruption.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel