CVE-2026-89473EPSS p8.9%
CVE-2026-89473CVE-2026-89473
Description
In the Linux kernel, the following vulnerability has been resolved:
power: supply: bq25890: Fix power_supply reference leak
bq25890_fw_probe() acquires a reference to a secondary charger using
power_supply_get_by_name(), but the reference is not released on later
probe failures or on driver detach.
In particular, failures after bq25890_fw_probe() returns successfully,
such as a failure in bq25890_hw_init(), also leak the reference.
Register a device-managed cleanup action immediately after acquiring
the secondary charger. This releases the reference on all subsequent
probe failures and on driver detach.
Found by code review.
Scoring
| EPSS | 0.20% probability of exploitation · percentile 8.9% · 2026-10-05T12:00:23Z |
| Last modified | 2026-09-14 |