CVE-2026-89465

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

power: supply: rt9455: quiesce delayed work before teardown

The threaded IRQ handler can queue pwr_rdy_work,

max_charging_time_work and batt_presence_work. pwr_rdy_work and

batt_presence_work can also queue max_charging_time_work, while

batt_presence_work can requeue itself.

rt9455_remove() cancels max_charging_time_work before

batt_presence_work. The latter can therefore queue

max_charging_time_work after it has already been cancelled:

rt9455_remove() workqueue

cancel pwr_rdy_work

cancel max_charging_time_work

batt_presence_work queues

max_charging_time_work

cancel batt_presence_work

return

devres frees rt9455_info

max_charging_time_work dereferences

rt9455_info

The IRQ also remains registered until devres cleanup and

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References