In the Linux kernel, the following vulnerability has been resolved:
power: supply: pm8916_bms_vm: Fix use-after-free in power_supply_changed()
Using the `devm_` variant for requesting IRQ _before_ the `devm_` variant for allocating/registering the `power_supply` handle, means that the `power_supply` handle will be deallocated/unregistered _before_ the interrupt handler (since `devm_` naturally deallocates in reverse allocation order). This means that during removal, there is a race condition where an interrupt can fire just _after_ the `power_supply` handle has been freed, *but* just _before_ the corresponding unregistration of the IRQ handler has run.
This will lead to the IRQ handler calling `power_supply_changed()` with a freed `power_supply` handle. Which usually crashes the system or otherwise silently corrupts the memory...
Note that there is a similar situation which can also happen during `probe()`; the possibility of an interrupt firing _before_ registering the `power_supply` handle. This would then lead to the nasty situation of using the `power_supply` handle *uninitialized* in `power_supply_changed()`.
Fix this racy use-after-free by making sure the IRQ is requested _after_ the registration of the `power_supply` handle.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1058-nvidiaUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1058-gkeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-134-lowlatencyUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1060-raspiUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1063-gcp-fipsUpgrade linux-image-6.8.0-134-fipsUpgrade linux-image-6.8.0-1058-nvidia-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-oracleUpgrade linux-image-fipsUpgrade linux-image-awsUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-134-generic-64kUpgrade linux-image-genericUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1060-awsUpgrade linux-image-6.8.0-1058-nvidia-lowlatencyUpgrade linux-image-6.8.0-1029-nvidia-tegraUpgrade linux-image-6.8.0-1063-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-6.8Upgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1060-aws-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-virtualUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1063-gcp-64kUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.1-1055-realtimeUpgrade linux-image-6.8.0-134-lowlatency-64kUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1060-aws-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1058-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1045-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-1029-nvidia-tegra-rtUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1057-oracle-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1062-azure-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-intel-iotgUpgrade linux-image-gcp-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-fips-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1057-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-laptop-23.10Upgrade linux-image-generic-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1058-gke-64kUpgrade linux-image-6.8.0-2049-raspi-realtimeUpgrade linux-image-xilinxUpgrade linux-image-virtual-6.8Upgrade linux-image-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-134-genericUpgrade linux-image-6.8.0-1060-ibmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-azure | Jul 2, 2026 | Jul 1, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub