In the Linux kernel, the following vulnerability has been resolved: power: supply: lp8788-charger: fix use-after-free on remove… (CVE-2026-89468)
A use-after-free vulnerability in the Linux kernel's lp8788-charger power supply driver was resolved. The issue occurs because charger_work can be queued after flush_work() returns, leading to a potential dereference of freed memory in lp8788_charger_event(). The fix involves unregistering IRQs before cancelling work to prevent further queuing and ensure safe cleanup.
AI Analysis
Technical Summary
The Linux kernel's lp8788-charger driver had a use-after-free vulnerability triggered during device removal. The function lp8788_charger_remove() flushes charger_work before unregistering IRQs, but an IRQ thread can queue charger_work after flush_work() returns. This queued work may run after the device resources are freed, causing a use-after-free in lp8788_charger_event(). The fix changes the order to unregister IRQs first (free_irq() waits for running handlers), preventing new work from being queued, then cancels pending work with cancel_work_sync(). This vulnerability was identified via an internal static analysis tool.
Potential Impact
The vulnerability could lead to a use-after-free condition in the kernel, potentially causing system instability or crashes if exploited. No known exploits in the wild have been reported. The impact is limited to systems running the affected driver in the Linux kernel.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this issue by changing the order of IRQ unregistration and work cancellation in the lp8788-charger driver. Users should update to a kernel version that includes this fix. No additional mitigation steps are indicated.
In the Linux kernel, the following vulnerability has been resolved: power: supply: lp8788-charger: fix use-after-free on remove… (CVE-2026-89468)
Description
A use-after-free vulnerability in the Linux kernel's lp8788-charger power supply driver was resolved. The issue occurs because charger_work can be queued after flush_work() returns, leading to a potential dereference of freed memory in lp8788_charger_event(). The fix involves unregistering IRQs before cancelling work to prevent further queuing and ensure safe cleanup.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel's lp8788-charger driver had a use-after-free vulnerability triggered during device removal. The function lp8788_charger_remove() flushes charger_work before unregistering IRQs, but an IRQ thread can queue charger_work after flush_work() returns. This queued work may run after the device resources are freed, causing a use-after-free in lp8788_charger_event(). The fix changes the order to unregister IRQs first (free_irq() waits for running handlers), preventing new work from being queued, then cancels pending work with cancel_work_sync(). This vulnerability was identified via an internal static analysis tool.
Potential Impact
The vulnerability could lead to a use-after-free condition in the kernel, potentially causing system instability or crashes if exploited. No known exploits in the wild have been reported. The impact is limited to systems running the affected driver in the Linux kernel.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this issue by changing the order of IRQ unregistration and work cancellation in the lp8788-charger driver. Users should update to a kernel version that includes this fix. No additional mitigation steps are indicated.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-v57r-whwp-c5pf
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-89468"]
Threat ID: 6aa4a01c55bf5e2cf5a8672a
Added to database: 09/12/2026, 00:43:08 UTC
Last enriched: 09/12/2026, 01:15:04 UTC
Last updated: 09/12/2026, 02:01:16 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.