CVE-2026-89797 Linux CVE debrief

Who should care

Linux kernel developers and users who rely on the power: supply: ab8500_fg driver should review and apply the patch to prevent potential system crashes. This includes developers who maintain or use the affected driver, as well as users who rely on systems that use this driver. The patch is essential to prevent potential crashes and ensure system stability.

Why it matters

A use-after-free vulnerability was found in the Linux kernel's power: supply: ab8500_fg driver, which could lead to a potential system crash. Linux kernel developers and users who rely on this driver should review and apply the patch to prevent potential crashes.

• Potential system crash due to use-after-free vulnerability
• Need to review and apply patch to prevent potential crashes
• Verification of system logs for potential crashes

Technical summary

The ab8500_fg_remove() function destroys the driver workqueue while the threaded interrupt handlers are still armed, leading to a potential crash. The issue has been resolved by tearing down the workqueue through devm instead. This change ensures that the workqueue is properly cleaned up, preventing potential crashes. The patch fixes the use-after-free vulnerability in the power: supply: ab8500_fg driver, preventing potential system crashes. The patch has been applied to the Linux kernel to fix the vulnerability. The vulnerability was found by an in-house static analysis tool.

Defensive priority

Medium

Recommended defensive actions

• Review and apply the patch to the Linux kernel
• Update the Linux kernel to the latest version
• Monitor system logs for potential crashes
• Verify system logs for potential crashes
• Review compensating controls for exposed systems
• Check relevant monitoring, detection, and logs for exposed assets
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The vulnerability was found by an in-house static analysis tool. The issue is related to the power: supply: ab8500_fg driver in the Linux kernel. The analysis tool identified a potential use-after-free vulnerability in the ab8500_fg_remove() function. The function destroys the driver workqueue while the threaded interrupt handlers are still armed, leading to a potential crash. The issue has been resolved by tearing down the workqueue through devm instead.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.