Strix
64.3K

CVE-2026-89474

UnknownEPSS 0.17%

Last modified

CVE-2026-89474 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: power: supply: bq256xx: drain usb_work before freeing the charger The USB-PHY notifier queues usb_work, whose handler calls power_supply_changed(bq->charger). The reset devm action only unregisters the notifier and was registered before the power supplies, so devm frees bq->charger on unwind before the action runs; a usb_work still queued can then dereference it. Register the reset action after the power supplies, so it unregisters the notifiers and drains usb_work before the supplies are released. Initialize usb_work and obtain the PHY references before registering the notifiers, so the worker cannot run before the supplies exist. Found by static analysis.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: power: supply: bq256xx: drain usb_work before freeing the charger The USB-PHY notifier queues usb_work, whose handler calls power_supply_changed(bq->charger). The reset devm action only unregisters the notifier and was registered before the power supplies, so devm frees bq->charger on unwind before the action runs; a usb_work still queued can then dereference it. Register the reset action after the power supplies, so it unregisters the notifiers and drains usb_work before the supplies are released. Initialize usb_work and obtain the PHY references before registering the notifiers, so the worker cannot run before the supplies exist. Found by static analysis.

Metrics

EPSS Probability
0.17%

6.3th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 32e4978bb920d047fe5de3ea42d176f267c01f63, < 9dcfdf6c598301b278f0b3490eb2bf4f600524e2; >= 32e4978bb920d047fe5de3ea42d176f267c01f63, < fd08d4dbbec07a44f01b0ddb041912be0dc88f8c; >= 32e4978bb920d047fe5de3ea42d176f267c01f63, < 2cfb59dc9df8b5ebdd95e3d874a7f4690cee2bc8; >= 32e4978bb920d047fe5de3ea42d176f267c01f63, < 9a467bd1e6811011026ad4c8de701b940d88a00c; >= 32e4978bb920d047fe5de3ea42d176f267c01f63, < 9e1aba34df9a87d53460888e05718717c0f69343; >= 32e4978bb920d047fe5de3ea42d176f267c01f63, < c8addb842ae8dcf69c15fc976e33e3bd538a41d7; >= 32e4978bb920d047fe5de3ea42d176f267c01f63, < 2dd6cd823777bea6d9a880a12a92a73ec76aee0b
LinuxLinux5.12

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-89474?
In the Linux kernel, the following vulnerability has been resolved: power: supply: bq256xx: drain usb_work before freeing the charger The USB-PHY notifier queues usb_work, whose handler calls power_supply_changed(bq->charger). The reset devm action only unregisters the notifier and was registered before the power supplies, so devm frees bq->charger on unwind before the action runs; a usb_work still queued can then dereference it. Register the reset action after the power supplies, so it unregisters the notifiers and drains usb_work before the supplies are released. Initialize usb_work and obtain the PHY references before registering the notifiers, so the worker cannot run before the supplies exist. Found by static analysis.
How severe is CVE-2026-89474?
Severity scoring for CVE-2026-89474 is pending analysis. The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2026-89474?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-89474?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST