Use-After-Free Vulnerability in Linux Kernel Affecting Power Supply Management

CVE-2026-99215

What is CVE-2026-99215?

A use-after-free vulnerability exists within the Linux kernel's power supply management subsystem. This issue arises when a power supply is unregistered while callbacks from registered power supplies are still being processed. If a malfunction occurs in the hardware bus (e.g., I2C), the core may still handle queued callbacks at the time of removal, which can lead to a situation where driver data is already freed, causing kernel crashes. The resolution involves implementing a read-write semaphore between the callback processing and power supply unregistration functions to ensure that data is not released prematurely. This fix stabilizes the power management process and reduces the risk of system crashes.

References