power: supply: isp1704_charger: cancel work on remove (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.18 % · percentile 7 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: power: supply: isp1704_charger: cancel work on remove The USB notifier and initial VBUS detection can schedule isp->work. The remove path unregisters the notifier and power supply, but does not wait for queued or running work before tearing down the power supply state. Cancel the work after unregistering the notifier. Do this before unregistering the power supply. This issue was found by a static analysis tool.
References
- https://git.kernel.org/stable/c/b0fa49bcb25b905b49dbb681c8a94f00d1a7f94d
- https://git.kernel.org/stable/c/a4750d5d7d1a3bac1b23ac5817f2bfbedcc95ac7
- https://git.kernel.org/stable/c/1ed74e3a8bbc104b744c257f8cbb2c371485ba4f
- https://git.kernel.org/stable/c/c22a9a539c76179fca5c0f28ee7652c4afda750b
- https://git.kernel.org/stable/c/cb442f1823df5782002ab4c36a8775270d41a772
- https://git.kernel.org/stable/c/f312c5d17f2a7ad50df5b52935d76abbe7b89feb
- https://git.kernel.org/stable/c/ad4f4e6678ecd4f6de97b73d4bab7d2352d40d70
- https://git.kernel.org/stable/c/60c5b8a9ef4dbc5d69bbc1a960fe55826cb3b643
European references
- ENISA EUVD · EUVD-2026-82056
- GCVE · GCVE-0-2026-90395
CERT-FR advisories
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1375 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1289 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1253 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected ec46475f3e3163dd80bfee086fa71b36455ecc0b < b0fa49bcb25b905b49dbb681c8a94f00d1a7f94d ; affected ec46475f3e3163dd80bfee086fa71b36455ecc0b < a4750d5d7d1a3bac1b23ac5817f2bfbedcc95ac7 ; affected ec46475f3e3163dd80bfee086fa71b36455ecc0b < 1ed74e3a8bbc104b744c257f8cbb2c371485ba4f ; affected ec46475f3e3163dd80bfee086fa71b36455ecc0b < c22a9a539c76179fca5c0f28ee7652c4afda750b ; affected ec46475f3e3163dd80bfee086fa71b36455ecc0b < cb442f1823df5782002ab4c36a8775270d41a772 ; affected ec46475f3e3163dd80bfee086fa71b36455ecc0b < f312c5d17f2a7ad50df5b52935d76abbe7b89feb |
| Linux · Linux | affected 2.6.37 ; unaffected 0 < 2.6.37 ; unaffected 5.10.270 ≤ 5.10.* ; unaffected 5.15.221 ≤ 5.15.* ; unaffected 6.1.188 ≤ 6.1.* ; unaffected 6.6.157 ≤ 6.6.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |