power: supply: bq27xxx: Fix poll_interval handling and races on remove

MITRE NVD CVE.ORG JSON API

Summary

CVECVE-2023-54079
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2025-12-24 13:16:09 UTC
Updated2026-08-04 10:19:27 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: power: supply: bq27xxx: Fix poll_interval handling and races on remove Before this patch bq27xxx_battery_teardown() was setting poll_interval = 0 to avoid bq27xxx_battery_update() requeuing the delayed_work item. There are 2 problems with this: 1. If the driver is unbound through sysfs, rather then the module being rmmod-ed, this changes poll_interval unexpectedly 2. This is racy, after it being set poll_interval could be changed before bq27xxx_battery_update() checks it through /sys/module/bq27xxx_battery/parameters/poll_interval Fix this by added a removed attribute to struct bq27xxx_device_info and using that instead of setting poll_interval to 0. There also is another poll_interval related race on remove(), writing /sys/module/bq27xxx_battery/parameters/poll_interval will requeue the delayed_work item for all devices on the bq27xxx_battery_devices list and the device being removed was only removed from that list after cancelling the delayed_work item. Fix this by moving the removal from the bq27xxx_battery_devices list to before cancelling the delayed_work item.

Risk And Classification

Primary CVSS: v3.1 7.8 HIGH from 416baaa9-dc9f-4396-8d5f-8c081fb06d67

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.001440000 probability, percentile 0.041390000 (date 2026-08-06)

VersionSourceTypeScoreSeverityVector
3.1416baaa9-dc9f-4396-8d5f-8c081fb06d67Secondary7.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
3.1CNADECLARED7.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 Breakdown

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected 8cfaaa811894a3ae2d7360a15a6cfccff3ebc7db 4c9615474fb0a41cfad658d78db3c9ec70912969 git Not specified
CNA Linux Linux affected 8cfaaa811894a3ae2d7360a15a6cfccff3ebc7db 465d919151a1e8d40daf366b868914f59d073211 git Not specified
CNA Linux Linux affected 8cfaaa811894a3ae2d7360a15a6cfccff3ebc7db 0c5f4cec759679c290720fbcf6bb81768e21c95b git Not specified
CNA Linux Linux affected 8cfaaa811894a3ae2d7360a15a6cfccff3ebc7db e85757da9091998276ff21a13915ac25229cc232 git Not specified
CNA Linux Linux affected 8cfaaa811894a3ae2d7360a15a6cfccff3ebc7db e98e5bebfcafc75a7b41192a607dfea5c1268afa git Not specified
CNA Linux Linux affected 8cfaaa811894a3ae2d7360a15a6cfccff3ebc7db d952a1eaafcc5f0351caad5dbe9b5b3300d1d529 git Not specified
CNA Linux Linux affected 8cfaaa811894a3ae2d7360a15a6cfccff3ebc7db b12faeca0e819ea09051a705fef9df7ea7e9e18c git Not specified
CNA Linux Linux affected 8cfaaa811894a3ae2d7360a15a6cfccff3ebc7db c00bc80462afc7963f449d7f21d896d2f629cacc git Not specified
CNA Linux Linux affected 3.3 Not specified
CNA Linux Linux unaffected 3.3 semver Not specified
CNA Linux Linux unaffected 4.14.316 4.14.* semver Not specified
CNA Linux Linux unaffected 4.19.284 4.19.* semver Not specified
CNA Linux Linux unaffected 5.4.244 5.4.* semver Not specified
CNA Linux Linux unaffected 5.10.181 5.10.* semver Not specified
CNA Linux Linux unaffected 5.15.114 5.15.* semver Not specified
CNA Linux Linux unaffected 6.1.31 6.1.* semver Not specified
CNA Linux Linux unaffected 6.3.5 6.3.* semver Not specified
CNA Linux Linux unaffected 6.4 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/4c9615474fb0a41cfad658d78db3c9ec70912969 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/e85757da9091998276ff21a13915ac25229cc232 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/465d919151a1e8d40daf366b868914f59d073211 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/b12faeca0e819ea09051a705fef9df7ea7e9e18c 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/0c5f4cec759679c290720fbcf6bb81768e21c95b 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/c00bc80462afc7963f449d7f21d896d2f629cacc 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/d952a1eaafcc5f0351caad5dbe9b5b3300d1d529 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/e98e5bebfcafc75a7b41192a607dfea5c1268afa 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report