SB20260918273 - Use-after-free in Linux kernel power supply driver
Published: September 18, 2026
Security Bulletin ID
SB20260918273
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Use-after-free (CVE-ID: CVE-2026-90395)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 0 [CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged user to access freed power supply state.
The vulnerability exists due to a use-after-free in the isp1704 charger driver's remove path when queued or running work executes during device removal. A local privileged user can cause work scheduled by USB notification or initial VBUS detection to execute after the power supply state is torn down to access freed power supply state.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/1ed74e3a8bbc104b744c257f8cbb2c371485ba4f
- https://git.kernel.org/stable/c/60c5b8a9ef4dbc5d69bbc1a960fe55826cb3b643
- https://git.kernel.org/stable/c/a4750d5d7d1a3bac1b23ac5817f2bfbedcc95ac7
- https://git.kernel.org/stable/c/ad4f4e6678ecd4f6de97b73d4bab7d2352d40d70
- https://git.kernel.org/stable/c/b0fa49bcb25b905b49dbb681c8a94f00d1a7f94d
- https://git.kernel.org/stable/c/c22a9a539c76179fca5c0f28ee7652c4afda750b
- https://git.kernel.org/stable/c/cb442f1823df5782002ab4c36a8775270d41a772
- https://git.kernel.org/stable/c/f312c5d17f2a7ad50df5b52935d76abbe7b89feb