7.8

CVE-2026-90027

usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop

cc_debounce_dwork is queued from the set_cc() and start_toggling()
callbacks, which run from TCPM's kthread worker.  port_stop() returns
before tcpm_unregister_port() destroys that worker.  Flushing the worker
during unregister may therefore run a callback which queues the delayed
work after port_stop() has returned.

The delayed work can then run after devres has freed pmic_typec_port.

Use disable_delayed_work_sync() in port_stop() to cancel a pending
instance and prevent the TCPM callbacks from queueing another one.

This issue was found by an in-house static analysis tool.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version a4422ff221429c600c3dc5d0394fb3738b89d040
Version < 4359b5f95c93a4658e08368fa6fab9d89eb98447
Status affected
Version a4422ff221429c600c3dc5d0394fb3738b89d040
Version < c614d7c44ca7fb78867ba46b233acdb59287e8c8
Status affected
Version a4422ff221429c600c3dc5d0394fb3738b89d040
Version < 1ab669c2b44e1040ddfab7cd7f717aad580d17aa
Status affected
Version a4422ff221429c600c3dc5d0394fb3738b89d040
Version < 263f7d61a4201cde16849b2d016251806e7418be
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.5
Status affected
Version 0
Version < 6.5
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.51
Status unaffected
Version <= 7.2.*
Version 7.2.5
Status unaffected
Version <= *
Version 7.3-rc2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.15% 0.047
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/4359b5f95c93a4658e08368fa6fab9d89eb98447
https://git.kernel.org/stable/c/c614d7c44ca7fb78867ba46b233acdb59287e8c8
https://git.kernel.org/stable/c/1ab669c2b44e1040ddfab7cd7f717aad580d17aa
https://git.kernel.org/stable/c/263f7d61a4201cde16849b2d016251806e7418be