CVE-2026-46246: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: power: supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler Using the `devm_` variant for requesting IRQ _before_ the `devm_` variant for allocating/registering the `extcon` handle, means that the `extcon` handle will be deallocated/unregistered _before_ the interrupt handler (since `devm_` naturally deallocates in reverse allocation order). This means that during removal, there is a race condition where an interrupt can fire just _after_ the `extcon` handle has been freed, *but* just _before_ the corresponding unregistration of the IRQ handler has run. This will lead to the IRQ handler calling `extcon_set_state_sync()` with a freed `extcon` handle. Which usually crashes the system or otherwise silently corrupts the memory... Fix this racy use-after-free by making sure the IRQ is requested _after_ the registration of the `extcon` handle.

Засегнати продукти

• Linux Linux: f8d7a3d21160a0cab4d15b81231f2a76b0fcee13 преди 9fab0120907e6965168e55b1e17cb9dfaf262b86; f8d7a3d21160a0cab4d15b81231f2a76b0fcee13 преди 47abfc207ab02cf1297257e282e8048da63f0d08; f8d7a3d21160a0cab4d15b81231f2a76b0fcee13 преди 48e0f68b50c344bb2d78d65dd98f93e41276ee00; f8d7a3d21160a0cab4d15b81231f2a76b0fcee13 преди 23067259919663580c6f81801847cfc7bd54fd1f
• Linux Linux: 6.7; преди 6.7; 6.12.75 до 6.12.*; 6.18.14 до 6.18.*; 6.19.4 до 6.19.*; от 7.0 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-46246
• https://nvd.nist.gov/vuln/detail/CVE-2026-46246
• https://git.kernel.org/stable/c/9fab0120907e6965168e55b1e17cb9dfaf262b86
• https://git.kernel.org/stable/c/47abfc207ab02cf1297257e282e8048da63f0d08
• https://git.kernel.org/stable/c/48e0f68b50c344bb2d78d65dd98f93e41276ee00
• https://git.kernel.org/stable/c/23067259919663580c6f81801847cfc7bd54fd1f