CVE-2026-89468

Received Received - Intake

Use-After-Free in Linux Kernel lp8788-charger Driver

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: power: supply: lp8788-charger: fix use-after-free on remove lp8788_charger_remove() flushes charger_work before unregistering the IRQs. An IRQ thread can queue charger_work after flush_work() has returned. The work can then run after devres frees pchg and dereference it in lp8788_charger_event(). Unregister the IRQs first. free_irq() waits for any running threaded handler, so no handler can queue more work afterwards. Then use cancel_work_sync() to cancel pending work or wait for running work to finish. This issue was found by an in-house static analysis tool.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-11

Last Modified

2026-09-11

Generated

2026-10-02

AI Q&A

2026-09-12

EPSS Evaluated

2026-09-29

NVD

CVE-2026-89468

EUVD

EUVD-2026-76374

Affected Vendors & Products

Vendor	Product	Version / Range
power	supply	lp8788_charger

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a use-after-free vulnerability in the Linux kernel's lp8788-charger driver. The issue occurs when the driver's remove function flushes charger_work before unregistering IRQs. An IRQ thread can still queue charger_work after the flush completes, leading to a situation where the work runs after the device resources are freed, causing a dereference of freed memory in lp8788_charger_event().

Detection Guidance

This vulnerability is specific to the Linux kernel's lp8788-charger driver and requires kernel-level inspection. Check if your system uses the affected driver by running: lsmod | grep lp8788_charger. If loaded, verify kernel logs for crashes or warnings with dmesg | grep -i lp8788.

Impact Analysis

This vulnerability could lead to system crashes, memory corruption, or potential privilege escalation if exploited. Systems using the affected lp8788-charger driver may experience instability or security breaches due to the use-after-free condition.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it pertains to a use-after-free issue in the Linux kernel's power supply subsystem. Compliance implications would depend on system-specific usage and data handling, which are not addressed by this CVE.

Mitigation Strategies

Update your Linux kernel to the latest stable version where this issue is patched. If immediate patching isn't possible, disable the lp8788-charger module by running rmmod lp8788_charger. Monitor system stability after changes.

Hi! I’m here to help you understand CVE-2026-89468. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70