In the Linux kernel, the following vulnerability has been resolved: power: supply: bq25890: Fix power_supply reference leak bq25890_fw_probe()… (CVE-2026-89473)
A reference leak vulnerability in the Linux kernel power supply driver for bq25890 was fixed. The function bq25890_fw_probe() acquires a reference to a secondary charger but fails to release it on certain probe failures or driver detach, causing a resource leak. The fix involves registering a device-managed cleanup action to ensure the reference is released properly.
AI Analysis
Technical Summary
The Linux kernel power supply driver for bq25890 had a reference leak issue where bq25890_fw_probe() acquired a reference to a secondary charger using power_supply_get_by_name() but did not release this reference on subsequent probe failures or when the driver detached. This included failures occurring after bq25890_fw_probe() returned successfully, such as in bq25890_hw_init(). The vulnerability was resolved by adding a device-managed cleanup action immediately after acquiring the secondary charger reference, ensuring it is released on all probe failures and driver detach. The issue was found by code review.
Potential Impact
The vulnerability causes a resource leak in the Linux kernel power supply driver, which could lead to increased memory usage or resource exhaustion over time. There is no indication of direct security impact such as privilege escalation or code execution from the provided data.
Mitigation Recommendations
A fix has been implemented in the Linux kernel source code by adding a device-managed cleanup action to release the reference properly. Users should update to the fixed kernel version once available. Patch status is not explicitly stated; check the vendor or Linux kernel advisory for the exact fixed version and apply the update accordingly.
In the Linux kernel, the following vulnerability has been resolved: power: supply: bq25890: Fix power_supply reference leak bq25890_fw_probe()… (CVE-2026-89473)
Description
A reference leak vulnerability in the Linux kernel power supply driver for bq25890 was fixed. The function bq25890_fw_probe() acquires a reference to a secondary charger but fails to release it on certain probe failures or driver detach, causing a resource leak. The fix involves registering a device-managed cleanup action to ensure the reference is released properly.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel power supply driver for bq25890 had a reference leak issue where bq25890_fw_probe() acquired a reference to a secondary charger using power_supply_get_by_name() but did not release this reference on subsequent probe failures or when the driver detached. This included failures occurring after bq25890_fw_probe() returned successfully, such as in bq25890_hw_init(). The vulnerability was resolved by adding a device-managed cleanup action immediately after acquiring the secondary charger reference, ensuring it is released on all probe failures and driver detach. The issue was found by code review.
Potential Impact
The vulnerability causes a resource leak in the Linux kernel power supply driver, which could lead to increased memory usage or resource exhaustion over time. There is no indication of direct security impact such as privilege escalation or code execution from the provided data.
Mitigation Recommendations
A fix has been implemented in the Linux kernel source code by adding a device-managed cleanup action to release the reference properly. Users should update to the fixed kernel version once available. Patch status is not explicitly stated; check the vendor or Linux kernel advisory for the exact fixed version and apply the update accordingly.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-82m6-wph9-4cgw
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-89473"]
Threat ID: 6aa4a02155bf5e2cf5a8699b
Added to database: 09/12/2026, 00:43:13 UTC
Last enriched: 09/12/2026, 01:15:54 UTC
Last updated: 09/12/2026, 01:49:56 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.