In the Linux kernel, the following vulnerability has been resolved: usb: typec: anx7411 - stop the IRQ before destroying the workqueue The IRQ is… (CVE-2026-98768)

The Linux kernel vulnerability CVE-2026-98768 concerns the usb typec anx7411 driver where the interrupt request (IRQ) was not stopped before the workqueue was destroyed during device removal. Since the IRQ is devm-managed, it could still queue work on plat->work while the remove() function was tearing down the workqueue, potentially causing race conditions or use-after-free scenarios. The resolution involves disabling the IRQ before destroying the workqueue to prevent further queuing of work during teardown.

The vulnerability could lead to race conditions or instability during device removal due to the IRQ queuing work on a workqueue that is being destroyed. This may cause kernel crashes or undefined behavior. No specific exploitation details or active exploits are reported.

A fix has been implemented in the Linux kernel to disable the IRQ before destroying the workqueue in the usb typec anx7411 driver. Users should update to the patched kernel version once available. No additional mitigation steps are indicated.