CVE Database›Document archive›CVE-2026-45902

CVE-2026-45902

kernel: power: supply: bq256xx: Fix use-after-free in power_supply_changed()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 27, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's bq256xx power supply driver. A race condition during device removal or probing can lead to a use-after-free vulnerability. This occurs when an interrupt handler attempts to access a power supply handle that has already been freed or is uninitialized. A local attacker could potentially exploit this to cause system instability or crashes, leading to a denial of service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-364 · Signal Handler Race Condition