CVE-2026-89468
N/AIn the Linux kernel, the following vulnerability has been resolved: power: supply: lp8788-charger: fix use-after-free on remove lp8788_charger_remove() flushes charger_work before unregistering the IRQs. An IRQ thread can queue charger_work after flush_work() has returned. The work can then run after devres frees pchg and dereference it in lp8788_charger_event(). Unregister the IRQs first. free_irq() waits for any running threaded handler, so no handler can queue more work afterwards. Then use cancel_work_sync() to cancel pending work or wait for running work to finish. This issue was found by an in-house static analysis tool.
No known exploitation, public exploit, or elevated probability at this time. Track for changes.
Exploitation likelihood
0.2%chance of exploitation in 30 days · 6th percentile
Impact if exploited
—CVSS · not scored
- No impact metrics
Proof of concept
No public PoC is currently catalogued.
Search for new PoCs
Search GitHub now — results may be empty or unverified.
Tracked sources are checked daily for recent CVEs, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.
Data snapshot:
References and research data (JSON)
Vendor product assessments
Showing 32 of 276 vendor product statements; 244 omitted. Read the full vendor advisory.
kernel as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-64k-debug-modules-extra as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-64k-debug-modules-extra
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-debug-core as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-debug-core
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-doc as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-doc
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-rt-64k-debug as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-64k-debug
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-rt-64k-modules-extra as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-64k-modules-extra
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-rt-devel as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-devel
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-uki-virt-addons as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-uki-virt-addons
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00libperf as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/libperf
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-debug-devel as a component of Red Hat Enterprise Linux 6 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-debug-devel
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00python-perf as a component of Red Hat Enterprise Linux 6 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/python-perf
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-headers as a component of Red Hat Enterprise Linux 7 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-headers
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-rt-doc as a component of Red Hat Enterprise Linux 7 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-doc
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel.src as a component of Red Hat Enterprise Linux 7 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel?arch=src
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-debug as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-debug
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-ipaclones-internal as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-ipaclones-internal
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-rt-debug-kvm as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-debug-kvm
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-rt-selftests-internal as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-selftests-internal
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-zfcpdump-modules as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-zfcpdump-modules
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-64k-core as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-64k-core
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-64k-debug-modules-internal as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-64k-debug-modules-internal
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-abi-stablelists as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-abi-stablelists
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-debug-modules-extra as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-debug-modules-extra
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-ipaclones-internal as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-ipaclones-internal
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-rt-64k-debug as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-64k-debug
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-rt-64k-debug-modules-partner as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-64k-debug-modules-partner
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-rt-core as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-core
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-rt-debug-modules-internal as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-debug-modules-internal
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-rt-modules-internal as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-modules-internal
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-uki-virt-addons as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-uki-virt-addons
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00kernel-zfcpdump-modules-partner as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-zfcpdump-modules-partner
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:oci/[email protected]?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-9
Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00
References
Advisories
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89468.json Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-76374 EUVD · EUVD-2026-76374
Technical & other
- https://git.kernel.org/stable/c/4e3d3923976a986cc3cf960d13f1264cea8a9bbaCVE record · Linux · Updated 2026-10-21T12:47:33.974Z
NVD · CVE-2026-89468 · Updated 2026-10-21T13:20:05.880 - https://git.kernel.org/stable/c/88d8eadfad5d9ff967e74090152940bcfa27df69CVE record · Linux · Updated 2026-10-21T12:47:33.974Z
NVD · CVE-2026-89468 · Updated 2026-10-21T13:20:05.880 - https://git.kernel.org/stable/c/b3aa1e9509e1b0a863353356d617fb45d1b6250aCVE record · Linux · Updated 2026-10-21T12:47:33.974Z
NVD · CVE-2026-89468 · Updated 2026-10-21T13:20:05.880 - https://git.kernel.org/stable/c/b4eb6a056b441ba0caedfbfc42cec501acf12f67CVE record · Linux · Updated 2026-10-21T12:47:33.974Z
NVD · CVE-2026-89468 · Updated 2026-10-21T13:20:05.880 - https://git.kernel.org/stable/c/831c29a12d560f8a3225f43050b3fbb5dfd79c66CVE record · Linux · Updated 2026-10-21T12:47:33.974Z
NVD · CVE-2026-89468 · Updated 2026-10-21T13:20:05.880 - https://access.redhat.com/security/cve/CVE-2026-89468 Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00
- https://bugzilla.redhat.com/show_bug.cgi?id=2532357 Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00
- https://www.cve.org/CVERecord?id=CVE-2026-89468 Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00
- https://nvd.nist.gov/vuln/detail/CVE-2026-89468 Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00
- https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89468.mbox Red Hat · CVE-2026-89468 · Updated 2026-09-29T14:16:53+00:00