Executive brief
A vulnerability in the Linux kernel's power supply driver for Maxim 77705 chips could lead to system instability or memory corruption. The issue stems from how the system handles hardware interrupts and memory cleanup when the driver is removed or fails to start. In a worst-case scenario, this could cause a system crash or allow for unauthorized memory access, though it requires local access to the system.
Technical details
A race condition and use-after-free (UAF) vulnerability exists in the max77705 charger driver (drivers/power/supply/max77705_charger.c). The driver incorrectly ordered the destruction of its workqueue relative to the release of its interrupt handlers. During a probe error or driver removal, the workqueue could be destroyed while the interrupt handler remained active; if an interrupt occurred in this window, it would attempt to schedule work on the already-freed workqueue. Additionally, the driver leaked memory because it failed to explicitly destroy the workqueue on removal. The fix migrates the driver to the devm_alloc_ordered_workqueue interface to ensure proper resource tracking and automated, correctly-ordered cleanup.
Affected products
- Linux Linux 6.15, 7.0.10, 7.1
Timeline
- 2026-03-05: other: Patch authored by Krzysztof Kozlowski
- 2026-06-26: disclosed: CVE published in NVD dataset