CVE-2026-46246
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
power: supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler
In the Linux kernel, the following vulnerability has been resolved: power: supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler Using the `devm_` variant for requesting IRQ _before_ the `devm_` variant for allocating/registering the `extcon` handle, means that the `extcon` handle will be deallocated/unregistered _before_ the interrupt handler (since `devm_` naturally deallocates in reverse allocation order). This means that during removal, there is a race condition where an interrupt can fire just _after_ the `extcon` handle has been freed, *but* just _before_ the corresponding unregistration of the IRQ handler has run. This will lead to the IRQ handler calling `extcon_set_state_sync()` with a freed `extcon` handle. Which usually crashes the system or otherwise silently corrupts the memory... Fix this racy use-after-free by making sure the IRQ is requested _after_ the registration of the `extcon` handle.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| f8d7a3d21160a0cab4d15b81231f2a76b0fcee13 | affected | git | 9fab0120907e6965168e55b1e17cb9dfaf262b86 | Unavailable | None listed |
| f8d7a3d21160a0cab4d15b81231f2a76b0fcee13 | affected | git | 47abfc207ab02cf1297257e282e8048da63f0d08 | Unavailable | None listed |
| f8d7a3d21160a0cab4d15b81231f2a76b0fcee13 | affected | git | 48e0f68b50c344bb2d78d65dd98f93e41276ee00 | Unavailable | None listed |
| f8d7a3d21160a0cab4d15b81231f2a76b0fcee13 | affected | git | 23067259919663580c6f81801847cfc7bd54fd1f | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.7 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 6.7 | Unavailable | None listed |
| 6.12.75 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.14 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 6.19.4 | unaffected | semver | Unavailable | 6.19.* | None listed |
| 7.0 | unaffected | original_commit_for_fix | Unavailable | * | None listed |