USB Type-C Implementation Vulnerability in Linux Kernel by Linux Foundation

CVE-2026-90026

What is CVE-2026-90026?

A vulnerability in the Linux kernel's USB Type-C driver arises from improper management of IRQs when stopping the PD PHY. Specifically, the function pdphy_stop() disables interrupts (IRQs) but fails to adequately manage the pending reset_work. If the IRQ handler schedules the reset_work immediately before the IRQs are disabled, the work can execute after the memory structure is freed, leading to undefined behavior. This issue highlights the importance of synchronizing work cancellation upon disabling IRQs, as demonstrated by the implementation of cancel_work_sync() post-disabling to close any potential execution window.

References