CVE-2026-89464 Linux Kernel CVE debrief

Who should care

Linux kernel developers and maintainers, Linux distribution maintainers, and users of Linux-based systems that use the twl4030_charger driver should review and apply the provided patches to fix the vulnerability. They should also monitor Linux kernel updates for potential backports of the fix and consider implementing additional monitoring and logging to detect potential exploitation attempts.

Why it matters

A use-after-free vulnerability in the Linux kernel's power: supply: twl4030_charger driver can lead to potential security issues if exploited. Linux kernel developers and maintainers should review and apply the provided patches to fix the vulnerability.

• Verify Linux kernel versions and apply patches to fix the vulnerability
• Monitor Linux kernel updates for potential backports of the fix
• Implement additional monitoring and logging to detect potential exploitation attempts

Technical summary

The Linux kernel's power: supply: twl4030_charger driver has a use-after-free vulnerability. The bci struct is devm-allocated and used by two workers, but it was not properly cleaned up during the remove process. This can lead to a potential use-after-free issue when the USB transceiver comes from devm_usb_get_phy_by_node(). The vulnerability can be mitigated by using devm_work_autocancel() and devm_delayed_work_autocancel() to avoid the use-after-free issue. Linux kernel developers and maintainers should review and apply the provided patches to fix the vulnerability.

Defensive priority

Medium

Recommended defensive actions

• Review and apply the provided kernel patches to fix the vulnerability
• Monitor Linux kernel updates for potential backports of the fix
• Consider implementing additional monitoring and logging to detect potential exploitation attempts
• Verify Linux kernel versions and apply patches to fix the vulnerability
• Implement compensating controls for exposed systems while remediation is scheduled and verified
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance

Evidence notes

The CVE record and source references indicate a use-after-free vulnerability in the Linux kernel's power: supply: twl4030_charger driver. However, details about exploitation, impact, and remediation are limited. Linux kernel developers and maintainers should review the provided patches to fix the vulnerability. The current_worker is registered first, since devm will cancel in reverse order and bci->work can reschedule current_worker.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.