The Linux kernel vulnerability (CVE-2026-89464) affected the twl4030_charger power supply driver. Two worker threads (bci->work and bci->current_worker) referenced a devm-allocated structure 'bci'. During device removal (twl4030_bci_remove()), charging was disabled and interrupts masked, but the workers were not canceled. This allowed a race condition where a worker could execute after the devm-managed 'bci' structure was freed, potentially causing use-after-free issues. The USB transceiver notifier was unregistered only after remove() returned, creating a race with cancel_work_sync(). The patch replaced cancel_work_sync() with devm_work_autocancel() and devm_delayed_work_autocancel(), which cancel workers during devm release in the correct order, preventing rescheduling after resource free.

The vulnerability could lead to use-after-free conditions in the kernel, potentially causing system instability or crashes. There is no information about exploitation in the wild or privilege escalation. The impact is limited to kernel-level resource management in the twl4030_charger driver.

A fix has been implemented in the Linux kernel source to properly cancel worker threads using devm_work_autocancel() and devm_delayed_work_autocancel() during device removal. Users should update to the fixed kernel version containing this patch. No additional mitigation is indicated.