CVE-2026-98768

Source
https://cve.org/CVERecord?id=CVE-2026-98768
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98768.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-98768
Downstream
Published
2026-10-18T15:48:03Z
Modified
2026-10-20T02:30:30Z
Summary
usb: typec: anx7411 - stop the IRQ before destroying the workqueue
Details

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: anx7411 - stop the IRQ before destroying the workqueue

The IRQ is devm-managed, so it can still queue plat->work while remove() is tearing the queue down. Disable it first.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98768.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
fe6d8a9c8e6456f8e7ba6b4ee528460beaf65a71
Fixed
675056e0edb49c0002ebfbc289e6c777bbf315a2
Fixed
50a92c02551c10e308caa55f7045f31abcef511f
Fixed
cb6bf2c707805211f606fb1e06fe28d9affe5ea7
Fixed
469600d5d292b1482c90dd6853555821d11b8c5f

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98768.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.0.0
Fixed
6.12.113
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.56
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.10

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98768.json"