CVE-2026-45882

A flaw was found in the Linux kernel's power supply subsystem, specifically in the pm8916_bms_vm driver. A race condition during the deallocation and unregistration of the power_supply handle and its interrupt handler can lead to a use-after-free vulnerability. This allows an interrupt to be processed using a freed or uninitialized power_supply handle. The most important consequence is that this can cause the system to crash or silently corrupt memory.