power: supply: sc2731_charger: cancel work on remove

Summary

CVECVE-2026-90394
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-09-17 17:17:39 UTC
Updated2026-10-19 09:19:33 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: power: supply: sc2731_charger: cancel work on remove The USB notifier and initial charger detection can schedule info->work. The remove path unregisters the notifier, but does not cancel queued or running work before the devm-allocated driver data is released. Set the platform drvdata used by remove, then cancel the work after unregistering the notifier. This issue was found by a static analysis tool.

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected 8ac1091ed18b4a6cb0dc2cd5653f080736f89392 bb74a5ab30963022981381ea6aee176fd0c7957c git Not specified
CNA Linux Linux affected 8ac1091ed18b4a6cb0dc2cd5653f080736f89392 232e9e946b496e4706e2f34ce4a617460d8ae713 git Not specified
CNA Linux Linux affected 8ac1091ed18b4a6cb0dc2cd5653f080736f89392 05c188addc6d1af51e28496e95096f4df9a000e9 git Not specified
CNA Linux Linux affected 8ac1091ed18b4a6cb0dc2cd5653f080736f89392 972d88069050d0272b776145b824198b8f899dce git Not specified
CNA Linux Linux affected 8ac1091ed18b4a6cb0dc2cd5653f080736f89392 c6df6e0c099086bc553d44410015cc81795070e6 git Not specified
CNA Linux Linux affected 8ac1091ed18b4a6cb0dc2cd5653f080736f89392 d5266b4c5c77152e386a3a2d9d5244b3b6cbd57a git Not specified
CNA Linux Linux affected 8ac1091ed18b4a6cb0dc2cd5653f080736f89392 aab9d81a415c6653b44b057695ebfbba34dc9556 git Not specified
CNA Linux Linux affected 8ac1091ed18b4a6cb0dc2cd5653f080736f89392 dfc859bb8d332c525872f1a44028137724fa1998 git Not specified
CNA Linux Linux affected 5.0 Not specified
CNA Linux Linux unaffected 5.0 semver Not specified
CNA Linux Linux unaffected 5.10.270 5.10.* semver Not specified
CNA Linux Linux unaffected 5.15.221 5.15.* semver Not specified
CNA Linux Linux unaffected 6.1.188 6.1.* semver Not specified
CNA Linux Linux unaffected 6.6.157 6.6.* semver Not specified
CNA Linux Linux unaffected 6.12.110 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.52 6.18.* semver Not specified
CNA Linux Linux unaffected 7.2.6 7.2.* semver Not specified
CNA Linux Linux unaffected 7.3 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/972d88069050d0272b776145b824198b8f899dce 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/c6df6e0c099086bc553d44410015cc81795070e6 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/d5266b4c5c77152e386a3a2d9d5244b3b6cbd57a 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/dfc859bb8d332c525872f1a44028137724fa1998 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/aab9d81a415c6653b44b057695ebfbba34dc9556 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/bb74a5ab30963022981381ea6aee176fd0c7957c 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/05c188addc6d1af51e28496e95096f4df9a000e9 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/232e9e946b496e4706e2f34ce4a617460d8ae713 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report