Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-45936

In the Linux kernel, the following vulnerability has been resolved: power: supply: goldfish: Fix use-after-free in power_supply_changed() Using the `devm_` variant for requesting IRQ _before_ the `devm_` variant for allocating/registering the `power_supply` handle, means that the `power_supply` handle will be deallocated/unregistered _before_ the interrupt handler (since `devm_` naturally deallocates in reverse allocation order). This means that during removal, there is a race condition where
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:0bc04352d1370927461e44a2ef25f1afba1d4eaa0b9d4c5015335c48ae0154dc
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/power/supply/goldfish_battery.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"589d4fe56713c6344cd9f8939f9c7621c85f0966","status":"affected","version":"84d7b768748943db2bb658b43931fdab04c224cc","versionType":"git"},{"lessThan":"bad8b61eb5059acd88349680e47839342dc89e94","status":"affected","version":"84d7b768748943db2bb658b43931fdab04c224cc","versionType":"git"},{"lessThan":"33751e28842bf5aee5ef7b2b8d5e456a069095cb","status":"affected","version":"84d7b7…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5ad7b7cfbe16694ec187413908f5a2d64da8c1c0af2143dc68cc1d7804e62d5e · sha256:98cc221c95c5f0ab… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/power/supply/goldfish_battery.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.9"},{"lessThan":"3.9","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.252","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.202","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.165","versionType":"se…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5ad7b7cfbe16694ec187413908f5a2d64da8c1c0af2143dc68cc1d7804e62d5e · sha256:98cc221c95c5f0ab… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/power/supply/goldfish_battery.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"589d4fe56713c6344cd9f8939f9c7621c85f0966","status":"affected","version":"84d7b768748943db2bb658b43931fdab04c224cc","versionType":"git"},{"lessThan":"bad8b61eb5059acd88349680e47839342dc89e94","status":"affected","version":"84d7b768748943db2bb658b43931fdab04c224cc","versionType":"git"},{"lessThan":"33751e28842bf5aee5ef7b2b8d5e456a069095cb","status":"affected","version":"84d7b7…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5ad7b7cfbe16694ec187413908f5a2d64da8c1c0af2143dc68cc1d7804e62d5e · sha256:98cc221c95c5f0ab… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/power/supply/goldfish_battery.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.9"},{"lessThan":"3.9","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.252","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.202","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.165","versionType":"se…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5ad7b7cfbe16694ec187413908f5a2d64da8c1c0af2143dc68cc1d7804e62d5e · sha256:98cc221c95c5f0ab… · /containers/cna/affected/1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/0b29ffe4090a3fc7a7649de20e1eb1e53adddac7"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5ad7b7cfbe16694ec187413908f5a2d64da8c1c0af2143dc68cc1d7804e62d5e · sha256:98cc221c95c5f0ab… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/33751e28842bf5aee5ef7b2b8d5e456a069095cb"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5ad7b7cfbe16694ec187413908f5a2d64da8c1c0af2143dc68cc1d7804e62d5e · sha256:98cc221c95c5f0ab… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/4350505e82b4f972ddb788e1c712c557c38859d0"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5ad7b7cfbe16694ec187413908f5a2d64da8c1c0af2143dc68cc1d7804e62d5e · sha256:98cc221c95c5f0ab… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/589d4fe56713c6344cd9f8939f9c7621c85f0966"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5ad7b7cfbe16694ec187413908f5a2d64da8c1c0af2143dc68cc1d7804e62d5e · sha256:98cc221c95c5f0ab… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/77ea437faa4c06362e3ecfd2d7264eaa7ac1e82c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5ad7b7cfbe16694ec187413908f5a2d64da8c1c0af2143dc68cc1d7804e62d5e · sha256:98cc221c95c5f0ab… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/8c89aade8335e26a6a7dcda18992d15f51943927"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5ad7b7cfbe16694ec187413908f5a2d64da8c1c0af2143dc68cc1d7804e62d5e · sha256:98cc221c95c5f0ab… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/b2ce982e2e0c888dc55c888ad0e20ea04daf2e6b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5ad7b7cfbe16694ec187413908f5a2d64da8c1c0af2143dc68cc1d7804e62d5e · sha256:98cc221c95c5f0ab… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/bad8b61eb5059acd88349680e47839342dc89e94"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5ad7b7cfbe16694ec187413908f5a2d64da8c1c0af2143dc68cc1d7804e62d5e · sha256:98cc221c95c5f0ab… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer