In the Linux kernel, the following vulnerability has been resolved:
power: supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler
Using the `devm_` variant for requesting IRQ _before_ the `devm_` variant for allocating/registering the `extcon` handle, means that the `extcon` handle will be deallocated/unregistered _before_ the interrupt handler (since `devm_` naturally deallocates in reverse allocation order). This means that during removal, there is a race condition where an interrupt can fire just _after_ the `extcon` handle has been freed, *but* just _before_ the corresponding unregistration of the IRQ handler has run.
This will lead to the IRQ handler calling `extcon_set_state_sync()` with a freed `extcon` handle. Which usually crashes the system or otherwise silently corrupts the memory...
Fix this racy use-after-free by making sure the IRQ is requested _after_ the registration of the `extcon` handle.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Ubuntu | — | Upgrade linux-image-oem-22.04aUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-gcp-fipsUpgrade linux-image-ibmUpgrade linux-image-azure-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-134-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-134-genericUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1058-nvidia-64kUpgrade linux-image-gke-6.8Upgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1058-nvidia-lowlatencyUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-6.8.0-1063-gcpUpgrade linux-image-6.8.0-1058-gke-64kUpgrade linux-image-6.8.0-1063-gcp-64kUpgrade linux-image-azureUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.1-1055-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gkeopUpgrade linux-image-aws-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-raspi-realtimeUpgrade linux-image-genericUpgrade linux-image-6.8.0-1057-oracleUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-2049-raspi-realtimeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-6.8.0-1060-aws-64kUpgrade linux-image-6.8.0-134-generic-64kUpgrade linux-image-6.8.0-134-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-1060-raspiUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-realtimeUpgrade linux-image-oem-20.04dUpgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-xilinxUpgrade linux-image-raspi-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1057-oracle-64kUpgrade linux-image-6.8.0-1058-nvidiaUpgrade linux-image-generic-64k-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1063-gcp-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-134-fipsUpgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1058-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-6.8.0-1029-nvidia-tegraUpgrade linux-image-oem-20.04Upgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1058-nvidia-lowlatency-64kUpgrade linux-image-azure-fde-6.8Upgrade linux-image-6.8.0-1062-azure-fipsUpgrade linux-image-6.8.0-1029-nvidia-tegra-rtUpgrade linux-image-oem-22.04dUpgrade linux-image-fips-6.8Upgrade linux-image-laptop-23.10Upgrade linux-image-6.8.0-1060-awsUpgrade linux-image-6.8.0-1045-gkeopUpgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1060-ibmUpgrade linux-image-6.8.0-1060-aws-fips | Jul 2, 2026 | Jul 1, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub