<Vulnerability name="CVE-2026-45879">
    <DocumentDistribution xml:lang="en">Copyright © 2012 Red Hat, Inc. All rights reserved.</DocumentDistribution>
    <PublicDate>2026-05-27T00:00:00</PublicDate>
    <Bugzilla id="2482099" url="https://bugzilla.redhat.com/show_bug.cgi?id=2482099" xml:lang="en:us">
kernel: power: supply: bq25980: Fix use-after-free in power_supply_changed()
    </Bugzilla>
    <CWE>CWE-364</CWE>
    <Details xml:lang="en:us" source="Red Hat">
A flaw was found in the Linux kernel's bq25980 power supply driver. A race condition during interrupt handling can lead to a use-after-free vulnerability, where the system attempts to access memory that has already been released. This can be triggered when an interrupt fires after the power supply handle is freed but before the interrupt handler is unregistered. Successful exploitation of this flaw can cause a system crash, resulting in a Denial of Service (DoS), or lead to silent memory corruption.
    </Details>
    <PackageState cpe="cpe:/o:redhat:enterprise_linux:10">
        <ProductName>Red Hat Enterprise Linux 10</ProductName>
        <FixState>Not affected</FixState>
        <PackageName>kernel</PackageName>
    </PackageState>
    <PackageState cpe="cpe:/o:redhat:enterprise_linux:6">
        <ProductName>Red Hat Enterprise Linux 6</ProductName>
        <FixState>Not affected</FixState>
        <PackageName>kernel</PackageName>
    </PackageState>
    <PackageState cpe="cpe:/o:redhat:enterprise_linux:7">
        <ProductName>Red Hat Enterprise Linux 7</ProductName>
        <FixState>Not affected</FixState>
        <PackageName>kernel</PackageName>
    </PackageState>
    <PackageState cpe="cpe:/o:redhat:enterprise_linux:7">
        <ProductName>Red Hat Enterprise Linux 7</ProductName>
        <FixState>Not affected</FixState>
        <PackageName>kernel-rt</PackageName>
    </PackageState>
    <PackageState cpe="cpe:/o:redhat:enterprise_linux:8">
        <ProductName>Red Hat Enterprise Linux 8</ProductName>
        <FixState>Not affected</FixState>
        <PackageName>kernel</PackageName>
    </PackageState>
    <PackageState cpe="cpe:/o:redhat:enterprise_linux:8">
        <ProductName>Red Hat Enterprise Linux 8</ProductName>
        <FixState>Not affected</FixState>
        <PackageName>kernel-rt</PackageName>
    </PackageState>
    <PackageState cpe="cpe:/o:redhat:enterprise_linux:9">
        <ProductName>Red Hat Enterprise Linux 9</ProductName>
        <FixState>Not affected</FixState>
        <PackageName>kernel</PackageName>
    </PackageState>
    <PackageState cpe="cpe:/o:redhat:enterprise_linux:9">
        <ProductName>Red Hat Enterprise Linux 9</ProductName>
        <FixState>Not affected</FixState>
        <PackageName>kernel-rt</PackageName>
    </PackageState>
    <References xml:lang="en:us">
https://www.cve.org/CVERecord?id=CVE-2026-45879
https://nvd.nist.gov/vuln/detail/CVE-2026-45879
https://lore.kernel.org/linux-cve-announce/2026052715-CVE-2026-45879-24a2@gregkh/T
    </References>
</Vulnerability>