The Linux kernel's bq25980 power supply driver had a use-after-free vulnerability due to the order of resource management. Using devm_ variants, the IRQ was requested before the power_supply handle was registered, causing the handle to be freed before the IRQ handler was unregistered during device removal. This race condition allows the IRQ handler to call power_supply_changed() with a freed handle, resulting in crashes or memory corruption. Additionally, interrupts firing before handle registration during probe could cause use of uninitialized handles. The vulnerability is fixed by changing the order to request the IRQ after registering the power_supply handle.

Exploitation of this vulnerability can cause system crashes or silent memory corruption due to use-after-free conditions in the kernel power supply driver. This affects system stability and could potentially be leveraged for privilege escalation or denial of service. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The fix involves changing the order of resource allocation to request the IRQ only after the power_supply handle is registered, preventing the race condition. Until an official patch is available, avoid using affected kernel versions in sensitive environments if possible.