power: supply: sc2731_charger: cancel work on remove (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.21 % · percentile 11 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: power: supply: sc2731_charger: cancel work on remove The USB notifier and initial charger detection can schedule info->work. The remove path unregisters the notifier, but does not cancel queued or running work before the devm-allocated driver data is released. Set the platform drvdata used by remove, then cancel the work after unregistering the notifier. This issue was found by a static analysis tool.
References
- https://git.kernel.org/stable/c/bb74a5ab30963022981381ea6aee176fd0c7957c
- https://git.kernel.org/stable/c/232e9e946b496e4706e2f34ce4a617460d8ae713
- https://git.kernel.org/stable/c/05c188addc6d1af51e28496e95096f4df9a000e9
- https://git.kernel.org/stable/c/972d88069050d0272b776145b824198b8f899dce
- https://git.kernel.org/stable/c/c6df6e0c099086bc553d44410015cc81795070e6
- https://git.kernel.org/stable/c/d5266b4c5c77152e386a3a2d9d5244b3b6cbd57a
- https://git.kernel.org/stable/c/aab9d81a415c6653b44b057695ebfbba34dc9556
- https://git.kernel.org/stable/c/dfc859bb8d332c525872f1a44028137724fa1998
European references
- ENISA EUVD · EUVD-2026-82055
- GCVE · GCVE-0-2026-90394
CERT-FR advisories
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1375 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1289 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1253 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 8ac1091ed18b4a6cb0dc2cd5653f080736f89392 < bb74a5ab30963022981381ea6aee176fd0c7957c ; affected 8ac1091ed18b4a6cb0dc2cd5653f080736f89392 < 232e9e946b496e4706e2f34ce4a617460d8ae713 ; affected 8ac1091ed18b4a6cb0dc2cd5653f080736f89392 < 05c188addc6d1af51e28496e95096f4df9a000e9 ; affected 8ac1091ed18b4a6cb0dc2cd5653f080736f89392 < 972d88069050d0272b776145b824198b8f899dce ; affected 8ac1091ed18b4a6cb0dc2cd5653f080736f89392 < c6df6e0c099086bc553d44410015cc81795070e6 ; affected 8ac1091ed18b4a6cb0dc2cd5653f080736f89392 < d5266b4c5c77152e386a3a2d9d5244b3b6cbd57a |
| Linux · Linux | affected 5.0 ; unaffected 0 < 5.0 ; unaffected 5.10.270 ≤ 5.10.* ; unaffected 5.15.221 ≤ 5.15.* ; unaffected 6.1.188 ≤ 6.1.* ; unaffected 6.6.157 ≤ 6.6.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |