01 Record

CVE-2026-89475

power: supply: bq24257: fix use-after-free on remove

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

power: supply: bq24257: fix use-after-free on remove

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.21% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 10.8% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Received. NVD last modified this record on 2026-10-19.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-09-11 19:43Z1 MO AGO

Last updated

2026-10-19 08:47Z10 DAYS AGO

Reserved

2026-09-11

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-825Expired Pointer DereferenceBase

Data version

5.2

Document digest

2dd737a7049d6d441a988041a47a4c6e656e4810417ebfc04582adfe68cae62d

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux2219a935963e5eeb19e5abfb99475fcc06bbb804 to < 9d77fd7dd9a3ad57f7655c5264b503b85adbb7b8, 2219a935963e5eeb19e5abfb99475fcc06bbb804 to < a279e64c907f5638bb34cb8e2c9285798cf5f690, 2219a935963e5eeb19e5abfb99475fcc06bbb804 to < 6d2eb93975c07b0169a3287efc1ae3b60cf52d8e, 2219a935963e5eeb19e5abfb99475fcc06bbb804 to < 861ec73ce86e2ca18082cc7be4f140a5bbdf1428, 2219a935963e5eeb19e5abfb99475fcc06bbb804 to < f495808cdd6d9576965787cf6d9737d0b0e86b73, 2219a935963e5eeb19e5abfb99475fcc06bbb804 to < 47ccbad210f48721c30d69d65b83dc9fff919ca9, 2219a935963e5eeb19e5abfb99475fcc06bbb804 to < 9d34c9d660c3d0931d2cc749c46c47cf31f96e48, 4.2—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/9d77fd7dd9a3ad57f7655c5264b503b85adbb7b8
git.kernel.orghttps://git.kernel.org/stable/c/a279e64c907f5638bb34cb8e2c9285798cf5f690
git.kernel.orghttps://git.kernel.org/stable/c/6d2eb93975c07b0169a3287efc1ae3b60cf52d8e
git.kernel.orghttps://git.kernel.org/stable/c/861ec73ce86e2ca18082cc7be4f140a5bbdf1428
git.kernel.orghttps://git.kernel.org/stable/c/f495808cdd6d9576965787cf6d9737d0b0e86b73
git.kernel.orghttps://git.kernel.org/stable/c/47ccbad210f48721c30d69d65b83dc9fff919ca9
git.kernel.orghttps://git.kernel.org/stable/c/9d34c9d660c3d0931d2cc749c46c47cf31f96e48

07 Fixed in

Debian 12

linux
Fixed in 6.1.190-1
linux-6.12
Fixed in 6.12.111-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.111-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.2.6-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.