In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: register regulators before exposing sysfs… (CVE-2026-89472)
A use-after-free vulnerability in the Linux kernel's power supply charger-manager subsystem was resolved. The issue arises from improper ordering of regulator registration and sysfs exposure, leading to potential dereferencing of freed handles during charger removal or error paths. This can occur when concurrent writes to sysfs attributes happen between regulator release and sysfs teardown. The fix reorders regulator acquisition and sysfs registration to prevent sysfs exposure before regulators are available and adjusts teardown sequences to avoid use-after-free conditions.
AI Analysis
Technical Summary
The Linux kernel's charger-manager component had a use-after-free vulnerability caused by exposing sysfs entries before regulators were registered and by improper ordering of resource release during teardown. Specifically, charger_manager_remove() and error paths freed regulators before unregistering sysfs entries, allowing concurrent sysfs writes to trigger dereferencing of freed consumer handles. The patch reorders the registration and teardown steps to ensure regulators are acquired before sysfs exposure and released after sysfs unregistration, eliminating the use-after-free windows. The vulnerability was identified via an in-house static analysis tool.
Potential Impact
This vulnerability can lead to use-after-free conditions in kernel space, potentially causing kernel crashes or undefined behavior when charging is enabled and concurrent sysfs writes occur. While no active exploitation in the wild is known, such flaws can undermine system stability and security by allowing invalid memory access in the kernel.
Mitigation Recommendations
A fix is available that reorders the registration and teardown of regulators and sysfs entries in the charger-manager code. Users should apply the official Linux kernel updates that include this patch. No additional mitigation is required beyond applying the fix.
In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: register regulators before exposing sysfs… (CVE-2026-89472)
Description
A use-after-free vulnerability in the Linux kernel's power supply charger-manager subsystem was resolved. The issue arises from improper ordering of regulator registration and sysfs exposure, leading to potential dereferencing of freed handles during charger removal or error paths. This can occur when concurrent writes to sysfs attributes happen between regulator release and sysfs teardown. The fix reorders regulator acquisition and sysfs registration to prevent sysfs exposure before regulators are available and adjusts teardown sequences to avoid use-after-free conditions.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel's charger-manager component had a use-after-free vulnerability caused by exposing sysfs entries before regulators were registered and by improper ordering of resource release during teardown. Specifically, charger_manager_remove() and error paths freed regulators before unregistering sysfs entries, allowing concurrent sysfs writes to trigger dereferencing of freed consumer handles. The patch reorders the registration and teardown steps to ensure regulators are acquired before sysfs exposure and released after sysfs unregistration, eliminating the use-after-free windows. The vulnerability was identified via an in-house static analysis tool.
Potential Impact
This vulnerability can lead to use-after-free conditions in kernel space, potentially causing kernel crashes or undefined behavior when charging is enabled and concurrent sysfs writes occur. While no active exploitation in the wild is known, such flaws can undermine system stability and security by allowing invalid memory access in the kernel.
Mitigation Recommendations
A fix is available that reorders the registration and teardown of regulators and sysfs entries in the charger-manager code. Users should apply the official Linux kernel updates that include this patch. No additional mitigation is required beyond applying the fix.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-24qw-5j5f-29wm
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-89472"]
Threat ID: 6aa4a02255bf5e2cf5a869a6
Added to database: 09/12/2026, 00:43:14 UTC
Last enriched: 09/12/2026, 01:16:32 UTC
Last updated: 09/12/2026, 01:16:32 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.