CVE-2026-89464power: supply: twl4030_charger: cancel workers via devm
- —Not scoredno CVSS score yet
- 0.17%Exploitation in 30 daysEPSS · top 93% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: power: supply: twl4030_charger: cancel workers via devm bci is devm-allocated. Two workers (bci->work and bci->current_worker) dereference it. twl4030_bci_remove() disables charging and masks interrupts. It cancels neither worker. A worker pending at remove() can run after devm frees bci. The USB transceiver comes from devm_usb_get_phy_by_node(). devm unregisters its notifier only after remove() returns. A cancel_work_sync() in remove() can then race a notifier reschedule. devm_work_autocancel() and devm_delayed_work_autocancel() avoid that. They cancel the workers during devm release, before bci is freed. The current_worker is registered first, since devm will cancel in reverse order and bci->work can reschedule current_worker. [Move comment about order into the commit message]
Timeline
ID reserved
By Linux
Published
- 38 days later
· 38 days later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Received.
- EPSS (exploitation in 30 days)
- 0.17% · top 93% of all CVEs (13 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected d6ccc442b12102414c1343f0adacaa8a1aaa516c – < 9644c96ef8646c65d46caa5139a6631e29b79d6c
- affected d6ccc442b12102414c1343f0adacaa8a1aaa516c – < e9fffe10bd791082263c1678f2f6cdd6d7b487e0
- affected d6ccc442b12102414c1343f0adacaa8a1aaa516c – < c46c205bab0dfce4dd54aeb49da3f183e1fdfc63
- affected d6ccc442b12102414c1343f0adacaa8a1aaa516c – < 72a2d6cd049f892853e4e2d8d8fc5e7d0244a458
- affected d6ccc442b12102414c1343f0adacaa8a1aaa516c – < a4460e89d4088cfec2da5be33e265ef1a8e780e9
- affected d6ccc442b12102414c1343f0adacaa8a1aaa516c – < b955da82db4170bdf1c784dc457287aa0c977378
- affected d6ccc442b12102414c1343f0adacaa8a1aaa516c – < 6eba34732524067da2aad5ddfdfbc641ded10e9e
- affected 2.6.39
- unaffected < 2.6.39
- unaffected 5.15.221 – ≤ 5.15.*
- unaffected 6.1.188 – ≤ 6.1.*
- unaffected 6.6.157 – ≤ 6.6.*
- unaffected 6.12.109 – ≤ 6.12.*
- unaffected 6.18.50 – ≤ 6.18.*
- unaffected 7.2.4 – ≤ 7.2.*
- unaffected 7.3 – ≤ *
References
References7
- https://git.kernel.org/stable/c/9644c96ef8646c65d46caa5139a6631e29b79d6c (opens in a new tab)
- https://git.kernel.org/stable/c/e9fffe10bd791082263c1678f2f6cdd6d7b487e0 (opens in a new tab)
- https://git.kernel.org/stable/c/c46c205bab0dfce4dd54aeb49da3f183e1fdfc63 (opens in a new tab)
- https://git.kernel.org/stable/c/72a2d6cd049f892853e4e2d8d8fc5e7d0244a458 (opens in a new tab)
- https://git.kernel.org/stable/c/a4460e89d4088cfec2da5be33e265ef1a8e780e9 (opens in a new tab)
- https://git.kernel.org/stable/c/b955da82db4170bdf1c784dc457287aa0c977378 (opens in a new tab)
- https://git.kernel.org/stable/c/6eba34732524067da2aad5ddfdfbc641ded10e9e (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-76370 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-89464)Record last updated .