CVE-2026-89468

In the Linux kernel, the following vulnerability has been resolved: power: supply: lp8788-charger: fix use-after-free on remove lp8788_charger_remove() flushes charger_work before unregistering the IRQs. An IRQ thread can queue charger_work after flush_work() has returned. The work can then run after devres frees pchg and dereference it in lp8788_charger_event(). Unregister the IRQs first. free_irq() waits for any running threaded handler, so no handler can queue more work afterwards. Then use cancel_work_sync() to cancel pending work or wait for running work to finish. This issue was found by an in-house static analysis tool.

• https://git.kernel.org/stable/c/831c29a12d560f8a3225f43050b3fbb5dfd79c66
• https://git.kernel.org/stable/c/88d8eadfad5d9ff967e74090152940bcfa27df69
• https://git.kernel.org/stable/c/b3aa1e9509e1b0a863353356d617fb45d1b6250a
• https://git.kernel.org/stable/c/b4eb6a056b441ba0caedfbfc42cec501acf12f67

Published

Sep 11, 2026

Last Modified

Sep 11, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-89462In the Linux kernel, the following vulnerability has been re…
• CVE-2026-89463In the Linux kernel, the following vulnerability has been re…
• CVE-2026-89464In the Linux kernel, the following vulnerability has been re…
• CVE-2026-89465In the Linux kernel, the following vulnerability has been re…8.4
• CVE-2026-89466In the Linux kernel, the following vulnerability has been re…7.7
• CVE-2026-89467In the Linux kernel, the following vulnerability has been re…
• CVE-2026-89469In the Linux kernel, the following vulnerability has been re…8.4
• CVE-2026-8947Use-after-free in the DOM: Bindings (WebIDL) component. This…7.3
• CVE-2026-89470In the Linux kernel, the following vulnerability has been re…8.4
• CVE-2026-89471In the Linux kernel, the following vulnerability has been re…8.4
• CVE-2026-89472In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-89473In the Linux kernel, the following vulnerability has been re…