CVE-2026-72182
Received Received - Intake

Power Supply Refcount Leak in Linux Kernel

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: fix refcount leak in is_full_charged() In is_full_charged(), power_supply_get_by_name() is called to obtain a reference to the fuel_gauge power supply. If the voltage check (uV >= desc->fullbatt_uV) succeeds, the function returns true directly without releasing the reference, leaking the refcount. Fix this by setting a flag and jumping to the out label where power_supply_put() properly drops the reference.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72182
EUVD
EUVD-2026-58940

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a reference count leak vulnerability in the Linux kernel's charger-manager component. The function is_full_charged() calls power_supply_get_by_name() to get a reference to a power supply but fails to release it when the voltage check passes, causing a memory leak.

Detection Guidance

This vulnerability is specific to the Linux kernel's charger-manager component and involves a reference count leak in the is_full_charged() function. Detection requires checking the kernel version and examining the charger-manager code for the described issue. Use commands like 'uname -r' to check the kernel version and 'grep -r is_full_charged /path/to/kernel/source' to inspect the function implementation.

Impact Analysis

The vulnerability could lead to resource exhaustion over time as leaked references accumulate. This may cause system instability, crashes, or degraded performance in systems using the affected kernel component.

Mitigation Strategies

Apply the latest kernel update that includes the fix for this vulnerability. If a patch is not yet available, consider disabling the charger-manager feature temporarily or monitor the Linux kernel mailing lists for an official patch. Reboot the system after applying the update to ensure the changes take effect.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72182. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart