Executive brief
A vulnerability was identified in the Linux kernel's PF1550 power supply driver. This component manages battery charging and power status for specific hardware. An exploit could cause the system to crash or lead to memory corruption, potentially impacting system stability and reliability.
Technical details
A use-after-free vulnerability exists in the pf1550-charger driver within the Linux kernel. The issue stems from an incorrect initialization order using the devm_ framework. Specifically, the IRQ handler is requested before the power_supply handle is registered. Because devm_ resources are released in reverse allocation order, the power_supply handle is freed before the IRQ handler is unregistered during driver removal. This creates a race condition where an interrupt firing after the handle is freed causes power_supply_changed() to access invalid memory. A similar race exists during probe() where an interrupt may fire before the handle is fully initialized. The fix involves reordering the registration so the IRQ is requested only after the power_supply handle is registered.
Affected products
- Linux Linux Kernel n/a
Timeline
- 2025-12-20: other: Patch authored
- 2026-05-27: disclosed: CVE published