CVE-2026-46246

power: supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler

published June 3, 2026

CVSS
—
EPSS
0%
Percentile
6.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

power: supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler

Using the `devm_` variant for requesting IRQ _before_ the `devm_`

variant for allocating/registering the `extcon` handle, means that the

`extcon` handle will be deallocated/unregistered _before_ the interrupt

handler (since `devm_` naturally deallocates in reverse allocation

order). This means that during removal, there is a race condition where

an interrupt can fire just _after_ the `extcon` handle has been

freed, *but* just _before_ the corresponding unregistration of the IRQ

handler has run.

This will lead to the IRQ handler calling `extcon_set_state_sync()` with

a freed `extcon` handle. Which usually crashes the system or otherwise

silently corrupts the memory...

Fix this racy use-after-free by making sure the IRQ is requested _after_

the registration of the `extcon` handle.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00170 · 6.1th percentile
Published
2026-06-03T15:49Z
EPSS history
Timeline
  • 03 JUN 15:49Z
    power: supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler
    cvelistv5