CVE-2026-89585

7.8 Élevée

Publiée le 11/09/2026 à 22:19 · Modifiée le 19/10/2026 à 11:17 · Reçue · Source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Description

In the Linux kernel, the following vulnerability has been resolved: auxdisplay: charlcd: cancel backlight work on registration failure With CONFIG_CHARLCD_BL_FLASH, charlcd_init() schedules bl_work before charlcd_register() calls misc_register(). If registration fails, the caller frees the charlcd object while delayed work still contains its address. Add charlcd_deinit() to cancel the delayed work and turn the backlight off. Use it for both registration rollback and normal unregistration.

Traduire en français

Produits concernés

Linux

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.8 Élevée	416baaa9-dc9f-4396-8d5f-8c081fb06d67	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`

Références

https://git.kernel.org/stable/c/22586432c1aba89d9bd33f3173408dac830f220b
https://git.kernel.org/stable/c/6eaed64a32e550daf0dc9549742b3ab9e41d984f
https://git.kernel.org/stable/c/84858671842ae5857b9ed1202b62f9045373dcd1
https://git.kernel.org/stable/c/cd97b3c68fe3c06c8067cc59d7dff976c5b7ea04
https://git.kernel.org/stable/c/e3e3bf40916c1e810df03958cfa7ba6883cdce79
https://git.kernel.org/stable/c/fe7ba73dde94c5f413b1588cd444b49105015dda
https://git.kernel.org/stable/c/ff2fb3c1e60cb247ea3e28c0ea0bea81c18f7755

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories