AZL-102234
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-102234.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-102234
- Upstream
- Published
- 2026-09-17T17:17:39Z
- Modified
- 2026-09-18T14:17:49Z
- Summary
- CVE-2026-90394 affecting package kernel 6.6.150.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
power: supply: sc2731_charger: cancel work on remove
The USB notifier and initial charger detection can schedule info->work. The remove path unregisters the notifier, but does not cancel queued or running work before the devm-allocated driver data is released.
Set the platform drvdata used by remove, then cancel the work after unregistering the notifier.
This issue was found by a static analysis tool.
- References