Threats tagged 'ghsa-5qv3-9727-cwhm'

CVE-2026-99215 is a use-after-free vulnerability in the Linux kernel's power supply core subsystem. It occurs when a power supply device is unregistered while a callback related to that power supply is still executing, potentially leading to kernel crashes. The issue arises because callbacks can run immediately after registration and may still be running during unregistration, causing freed driver data to be accessed. This vulnerability has been addressed by adding synchronization to prevent unregistration while callbacks are active.