CVE-2026-45902
kernel: power: supply: bq256xx: Fix use-after-free in power_supply_changed()
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 27, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's bq256xx power supply driver. A race condition during device removal or probing can lead to a use-after-free vulnerability. This occurs when an interrupt handler attempts to access a power supply handle that has already been freed or is uninitialized. A local attacker could potentially exploit this to cause system instability or crashes, leading to a denial of service.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-364 · Signal Handler Race Condition