CVE-2026-89465

A flaw was found in the Linux kernel, specifically within the rt9455 power supply driver. This vulnerability occurs due to improper management of delayed tasks when the device is being removed or if its initialization fails. A pending task can attempt to access memory that has already been released, leading to a use-after-free condition. This could allow a local attacker to cause the system to crash, resulting in a Denial of Service, or potentially lead to privilege escalation.

This vulnerability is rated as having an Important impact for Red Hat due to the potential for a local attacker to trigger kernel memory corruption that could crash the system or escalate privileges. However, the affected RT9455 battery charger driver is not enabled in supported Red Hat Enterprise Linux and OpenShift kernel configurations, as it is designed for specialized embedded power-management hardware. Consequently, default Red Hat product installations do not ship or load the vulnerable code and are not exposed to this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.