CVE-2026-89464
CVE CVE-2026-89464EUVD EUVD-2026-76370Published 2026-09-11T19:43:25.000ZLast changed 2026-09-14T12:00:03.000Z
What the advisory describes
In the Linux kernel, the following vulnerability has been resolved: power: supply: twl4030_charger: cancel workers via devm bci is devm-allocated. Two workers (bci->work and bci->current_worker) dereference it. twl4030_bci_remove() disables charging and masks interrupts. It cancels neither worker. A worker pending at remove() can run after devm frees bci. The USB transceiver comes from devm_usb_get_phy_by_node(). devm unregisters its notifier only after remove() returns. A cancel_work_sync() in remove() can then race a notifier reschedule. devm_work_autocancel() and devm_delayed_work_autocancel() avoid that. They cancel the workers during devm release, before bci is freed. The current_worker is registered first, since devm will cancel in reverse order and bci->work can reschedule current_worker. [Move comment about order into the commit message]
Source: EUVD (ENISA), in the words of the advisory.
Products the advisory names
These come from the advisory itself, not from any check we performed.
- Linux — Linux d6ccc442b12102414c1343f0adacaa8a1aaa516c <6eba34732524067da2aad5ddfdfbc641ded10e9e; patch: 6.12.109; d6ccc442b12102414c1343f0adacaa8a1aaa516c <b955da82db4170bdf1c784dc457287aa0c977378; patch: 7.2.4; patch: 6.1.188; d6ccc442b12102414c1343f0adacaa8a1aaa516c <a4460e89d4088cfec2da5be33e265ef1a8e780e9; patch: 5.15.221; d6ccc442b12102414c1343f0adacaa8a1aaa516c <c46c205bab0dfce4dd54aeb49da3f183e1fdfc63; patch: 7.3-rc1; d6ccc442b12102414c1343f0adacaa8a1aaa516c <72a2d6cd049f892853e4e2d8d8fc5e7d0244a458; d6ccc442b12102414c1343f0adacaa8a1aaa516c <9644c96ef8646c65d46caa5139a6631e29b79d6c; 2.6.39; patch: 6.6.157; d6ccc442b12102414c1343f0adacaa8a1aaa516c <e9fffe10bd791082263c1678f2f6cdd6d7b487e0; patch: 0; patch: 6.18.50
The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.
Carried in the product catalogue
An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.
- Linux — Linux
Does this concern one of your customers?
This page cannot answer that — it does not know your estate. Whoever has recorded their environments gets the answer the morning after publication, together with a paragraph they can forward to the customer unedited.
Try it for 28 daysPatchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.