CVE-2026-45867
📛 CVE Title
power: supply: act8945a: Fix use-after-free in power_supply_changed()
Description
In the Linux kernel, the following vulnerability has been resolved: power: supply: act8945a: Fix use-after-free in power_supply_changed() Using the `devm_` variant for requesting IRQ _before_ the `devm_` variant for allocating/registering the `power_supply` handle, means that the `power_supply` handle will be deallocated/unregistered _before_ the interrupt handler (since `devm_` naturally deallocates in reverse allocation order). This means that during removal, there is a race condition where an interrupt can fire just _after_ the `power_supply` handle has been freed, *but* just _before_ the corresponding unregistration of the IRQ handler has run. This will lead to the IRQ handler calling `power_supply_changed()` with a freed `power_supply` handle. Which usually crashes the system or otherwise silently corrupts the memory... Note that there is a similar situation which can also happen during `probe()`; the possibility of an interrupt firing _before_ registering the `power_supply` handle. This would then lead to the nasty situation of using the `power_supply` handle *uninitialized* in `power_supply_changed()`. Fix this racy use-after-free by making sure the IRQ is requested _after_ the registration of the `power_supply` handle.
Overview
- State
- PUBLISHED
- Assigner (CNA)
- Linux
- CVSS severity
- high
- CVSS score
- 8.4 / 10
- CVSS vector
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H- Effective score
- 8.4 / 10 HIGH source: CNA overview
- CWE(s)
- —
- Reserved
- 2026-05-13
- Published
- 2026-05-27 12:15 UTC
- Last updated
- 2026-05-27 12:15 UTC
- Source
- https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45867.json
- Linked Threat
- CVE-2026-45867 — CVE-2026-45867
NVD triage scoring NVD CVE 2.0
Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.
- NVD published
- 2026-05-27 14:17:00 UTC
- NVD last modified
- 2026-06-25 21:06:38 UTC
- NVD CVSS v3.1
- 7.8 / 10 HIGH source: nvd@nist.gov
- NVD CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H- Exploitability subscore
- 1.8 / 10
- Impact subscore
- 5.9 / 10
- EPSS score
- 0.0016 (probability of exploitation in next 30 days)
- EPSS percentile
- 5.93% vs all CVEs — higher = more likely to be exploited, as of 2026-07-06
NVD-assigned CWE(s):
CWE-416
(differs from the CNA list above)
NVD / KEV / EPSS data refreshed 2026-07-07 03:44 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.
European Union Vulnerability Database ENISA EUVD
ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.
- EUVD ID
-
EUVD-2026-32333 - Assigner
- Linux
- Published
- May 27, 2026, 12:15:47 PM
- Updated
- May 27, 2026, 12:15:47 PM
- EUVD base score
- 0.0 / 10
- EUVD-reported EPSS
- 0.1600
- Vendors
- Linux
- Products
-
Linux (a09209acd6a808794bdd7866af3678d1fd1d90e7 <697bb5dc0cb4791e244f3970b067bc1ef33be9d9)Linux (a09209acd6a808794bdd7866af3678d1fd1d90e7 <76a42ba547a9b2e2337894f67a4d9247445007d5)Linux (patch: 6.6.128)Linux (patch: 6.12.75)Linux (a09209acd6a808794bdd7866af3678d1fd1d90e7 <83c1bd466c514cb24ca6ef347c5aac76a13c4e1e)Linux (a09209acd6a808794bdd7866af3678d1fd1d90e7 <3291c51d4684d048dd2eb91b5b65fcfdaf72141f)Linux (patch: 7.0)Linux (patch: 6.1.165)Linux (patch: 5.15.202)Linux (patch: 6.18.14)Linux (a09209acd6a808794bdd7866af3678d1fd1d90e7 <d023ef9f748b2090f7a9dbdd5c622b6ad99088ea)Linux (a09209acd6a808794bdd7866af3678d1fd1d90e7 <f2a0777b1e5a3cee1712c4d3e9095c0df8fc8cb3)Linux (4.9)Linux (patch: 6.19.4)Linux (a09209acd6a808794bdd7866af3678d1fd1d90e7 <0768e8525a46df103647ca5059b32320d7fd17e4)Linux (patch: 5.10.252)Linux (patch: 0)Linux (a09209acd6a808794bdd7866af3678d1fd1d90e7 <f27eb76def5c07e4d7cc468b40741f19dafc83ce)
- Aliases
-
GHSA-42vv-474v-7pc6
ENISA description: In the Linux kernel, the following vulnerability has been resolved: power: supply: act8945a: Fix use-after-free in power_supply_changed() Using the `devm_` variant for requesting IRQ _before_ the `devm_` variant for allocating/registering the `power_supply` handle, means that the `power_supply` handle will be deallocated/unregistered _before_ the interrupt handler (since `devm_` naturally deallocates in reverse allocation order). This means that during removal, there is a race condition where an interrupt can fire just _after_ the `power_supply` handle has been freed, *but* just _before_ the corresponding unregistration of the IRQ handler has run. This will lead to the IRQ handler calling `power_supply_changed()` with a freed `power_supply` handle. Which usually crashes the system or otherwise silently corrupts the memory... Note that there is a similar situation which can also happen during `probe()`; the possibility of an interrupt firing _before_ registering the `power_supply` handle. This would then lead to the nasty situation of using the `power_supply` handle *uninitialized* in `power_supply_changed()`. Fix this racy use-after-free by making sure the IRQ is requested _after_ the registration of the `power_supply` handle.
EUVD references (8)
- https://git.kernel.org/stable/c/f2a0777b1e5a3cee1712c4d3e9095c0df8fc8cb3
- https://git.kernel.org/stable/c/0768e8525a46df103647ca5059b32320d7fd17e4
- https://git.kernel.org/stable/c/d023ef9f748b2090f7a9dbdd5c622b6ad99088ea
- https://git.kernel.org/stable/c/697bb5dc0cb4791e244f3970b067bc1ef33be9d9
- https://git.kernel.org/stable/c/76a42ba547a9b2e2337894f67a4d9247445007d5
- https://git.kernel.org/stable/c/f27eb76def5c07e4d7cc468b40741f19dafc83ce
- https://git.kernel.org/stable/c/83c1bd466c514cb24ca6ef347c5aac76a13c4e1e
- https://git.kernel.org/stable/c/3291c51d4684d048dd2eb91b5b65fcfdaf72141f
Affected products (2)
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Linux | Linux |
a09209acd6a808794bdd7866af3678d1fd1d90e7 (affected),
a09209acd6a808794bdd7866af3678d1fd1d90e7 (affected),
a09209acd6a808794bdd7866af3678d1fd1d90e7 (affected),
a09209acd6a808794bdd7866af3678d1fd1d90e7 (affected),
a09209acd6a808794bdd7866af3678d1fd1d90e7 (affected),
a09209acd6a808794bdd7866af3678d1fd1d90e7 (affected),
a09209acd6a808794bdd7866af3678d1fd1d90e7 (affected),
a09209acd6a808794bdd7866af3678d1fd1d90e7 (affected)
|
— |
| Linux | Linux |
4.9 (affected),
0 (unaffected),
5.10.252 (unaffected),
5.15.202 (unaffected),
6.1.165 (unaffected),
6.6.128 (unaffected),
6.12.75 (unaffected),
6.18.14 (unaffected),
6.19.4 (unaffected),
7.0 (unaffected)
|
— |
Affected products — CPE 2.3 (1) NVD
NVD's normalized CPE 2.3 matchers, used by vendor tools (vulnerability scanners, asset managers) for automated detection. Compare with the CNA's free-text "Affected products" section above.
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendor references (8)
References embedded in the original CVE record by the assigning CNA.
- https://git.kernel.org/stable/c/f2a0777b1e5a3cee1712c4d3e9095c0df8fc8cb3
- https://git.kernel.org/stable/c/0768e8525a46df103647ca5059b32320d7fd17e4
- https://git.kernel.org/stable/c/d023ef9f748b2090f7a9dbdd5c622b6ad99088ea
- https://git.kernel.org/stable/c/697bb5dc0cb4791e244f3970b067bc1ef33be9d9
- https://git.kernel.org/stable/c/76a42ba547a9b2e2337894f67a4d9247445007d5
- https://git.kernel.org/stable/c/f27eb76def5c07e4d7cc468b40741f19dafc83ce
- https://git.kernel.org/stable/c/83c1bd466c514cb24ca6ef347c5aac76a13c4e1e
- https://git.kernel.org/stable/c/3291c51d4684d048dd2eb91b5b65fcfdaf72141f
Web references (11)
DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.
- https://git.kernel.org/stable/c/0768e8525a46df103647ca5059b32320d7fd17e4 tenable:git.kernel.org
- https://git.kernel.org/stable/c/3291c51d4684d048dd2eb91b5b65fcfdaf72141f tenable:git.kernel.org
- https://git.kernel.org/stable/c/697bb5dc0cb4791e244f3970b067bc1ef33be9d9 tenable:git.kernel.org
- https://git.kernel.org/stable/c/76a42ba547a9b2e2337894f67a4d9247445007d5 tenable:git.kernel.org
- https://git.kernel.org/stable/c/83c1bd466c514cb24ca6ef347c5aac76a13c4e1e tenable:git.kernel.org
- https://git.kernel.org/stable/c/d023ef9f748b2090f7a9dbdd5c622b6ad99088ea tenable:git.kernel.org
- https://git.kernel.org/stable/c/f27eb76def5c07e4d7cc468b40741f19dafc83ce tenable:git.kernel.org
- https://git.kernel.org/stable/c/f2a0777b1e5a3cee1712c4d3e9095c0df8fc8cb3 tenable:git.kernel.org
- https://nvd.nist.gov/vuln/detail/CVE-2026-45867 tenable:nvd.nist.gov
- https://www.cve.org/CVERecord?id=CVE-2026-45867 tenable:www.cve.org
- https://www.first.org/epss/ tenable:www.first.org
NVD-tagged references (8)
Reference list NVD curates from the CNA record, vendor advisories, and third-party reports. The tag chips below are NVD's analyst-assigned categories.
- https://git.kernel.org/stable/c/0768e8525a46df103647ca5059b32320d7fd17e4 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
- https://git.kernel.org/stable/c/3291c51d4684d048dd2eb91b5b65fcfdaf72141f 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
- https://git.kernel.org/stable/c/697bb5dc0cb4791e244f3970b067bc1ef33be9d9 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
- https://git.kernel.org/stable/c/76a42ba547a9b2e2337894f67a4d9247445007d5 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
- https://git.kernel.org/stable/c/83c1bd466c514cb24ca6ef347c5aac76a13c4e1e 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
- https://git.kernel.org/stable/c/d023ef9f748b2090f7a9dbdd5c622b6ad99088ea 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
- https://git.kernel.org/stable/c/f27eb76def5c07e4d7cc468b40741f19dafc83ce 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
- https://git.kernel.org/stable/c/f2a0777b1e5a3cee1712c4d3e9095c0df8fc8cb3 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
Remediations (17)
Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.
-
web:blog.qualys.com
Microsoft has rolled out its March 2026 Patch Tuesday updates, delivering a fresh batch of security fixes designed to keep Windows environments protected from emerging threats.
2026-06-04 00:16 UTC -
web:cybersecuritynews.com
Microsoft has released its April 2026 Patch Tuesday security update, addressing 168 vulnerabilities across its product portfolio including one actively exploited zero-day and one publicly disclosed flaw that organizations must prioritize immediately.
2026-06-04 00:16 UTC -
web:cybersecuritynews.com
Microsoft's May 2026 Patch Tuesday lands with a heavy enterprise focus, fixing 120 vulnerabilities across Windows, Office, Azure, developer tools, and Microsoft 365 apps, including 29 remote code execution (RCE) flaws rated Critical.
2026-06-04 00:16 UTC -
web:portal.msrc.microsoft.com
The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.
2026-06-04 00:16 UTC -
web:support.microsoft.com
The following summary outlines key issues addressed by this update. The bold text within the brackets indicates the item or area of the change. [Networking] Fixed: This update addresses a security issue in the Windows Routing and Remote Access Service (RRAS) management tool. If you connect to a malicious remote server, an attacker could disrupt the tool or run code on your device. For more ...
2026-06-04 00:16 UTC -
web:www.crowdstrike.com
Microsoft's March 2026 Patch Tuesday addresses 82 CVEs , featuring eight Critical vulnerabilities.
2026-06-04 00:16 UTC -
web:www.notebookcheck.net
Microsoft's Windows 11 KB5083769 April 2026 update causes critical boot failures, pixelated BSODs, and BitLocker recovery loops on Windows 11 24H2 and 25H2 PCs.
2026-06-04 00:16 UTC -
web:www.oracle.com
Oracle Critical Patch Update Advisory - April 2026 Description A Critical Patch Update is a collection of patches for multiple security vulnerabilities. These patches address vulnerabilities in Oracle code and in third party components included in Oracle products. These patches are usually cumulative, but each advisory describes only the security patches added since the previous Critical Patch ...
2026-06-04 00:16 UTC -
web:www.windowslatest.com
Windows 11 April 2026 update adds Narrator Copilot support, faster Settings, File Explorer fixes, and key security improvements.
2026-06-04 00:16 UTC -
web:zecurit.com
Get the complete breakdown of Microsoft's June 2026 Patch Tuesday. We analyze the latest security updates and all critical CVEs .
2026-06-04 00:16 UTC -
web:blog.qualys.com
May 2026's Patch Tuesday arrives with Microsoft addressing a fresh set of vulnerabilities across its ecosystem, reinforcing the ongoing need for timely patching in an increasingly threat-heavy…
2026-06-19 02:27 UTC -
web:nvd.nist.gov
Description Improper link resolution before file access ('link following') in Windows Collaborative Translation Framework allows an authorized attacker to elevate privileges locally.
2026-06-19 02:27 UTC -
web:windowsforum.com
The Patch Window Is the Real Security Boundary The practical lessons from CVE - 2026 -45657 are not mysterious, but they are concrete enough to separate disciplined shops from hopeful ones. This is not a vulnerability that rewards theatrical mitigation plans. It rewards boring execution: update, reboot, verify, segment, monitor.
2026-06-19 02:27 UTC -
web:www.computerworld.com
Each month, the team at Readiness analyzes the latest Patch Tuesday updates from Microsoft and provides detailed, actionable testing guidance. The company's Patch Tuesday release for February ...
2026-06-19 02:27 UTC -
web:www.malwarebytes.com
Microsoft says it's working on a fix for an unpatched Defender vulnerability that can give attackers the highest level of access on Windows.
2026-06-19 02:27 UTC -
web:www.oracle.com
This Critical Security Patch Update contains 35 new security patches across the product families listed below. Please note that an MOS note summarizing the content of this Critical Security Patch Update and other Oracle Software Security Assurance activities is located at May 2026 Critical Security Patch Update: Executive Summary and Analysis.
2026-06-19 02:27 UTC -
web:www.rapid7.com
Microsoft is publishing 200 vulnerabilities on June 2026 Patch Tuesday, including an HTTP/2 denial of service vulnerability and an elevation of privilege vulnerability in PowerToys.
2026-06-19 02:27 UTC
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.
Raw JSON
The full cvelistV5 record. Download as CVE-2026-45867.json.
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Linux",
"programFiles": [
"drivers/power/supply/act8945a_charger.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"lessThan": "f2a0777b1e5a3cee1712c4d3e9095c0df8fc8cb3",
"status": "affected",
"version": "a09209acd6a808794bdd7866af3678d1fd1d90e7",
"versionType": "git"
},
{
"lessThan": "0768e8525a46df103647ca5059b32320d7fd17e4",
"status": "affected",
"version": "a09209acd6a808794bdd7866af3678d1fd1d90e7",
"versionType": "git"
},
{
"lessThan": "d023ef9f748b2090f7a9dbdd5c622b6ad99088ea",
"status": "affected",
"version": "a09209acd6a808794bdd7866af3678d1fd1d90e7",
"versionType": "git"
},
{
"lessThan": "697bb5dc0cb4791e244f3970b067bc1ef33be9d9",
"status": "affected",
"version": "a09209acd6a808794bdd7866af3678d1fd1d90e7",
"versionType": "git"
},
{
"lessThan": "76a42ba547a9b2e2337894f67a4d9247445007d5",
"status": "affected",
"version": "a09209acd6a808794bdd7866af3678d1fd1d90e7",
"versionType": "git"
},
{
"lessThan": "f27eb76def5c07e4d7cc468b40741f19dafc83ce",
"status": "affected",
"version": "a09209acd6a808794bdd7866af3678d1fd1d90e7",
"versionType": "git"
},
{
"lessThan": "83c1bd466c514cb24ca6ef347c5aac76a13c4e1e",
"status": "affected",
"version": "a09209acd6a808794bdd7866af3678d1fd1d90e7",
"versionType": "git"
},
{
"lessThan": "3291c51d4684d048dd2eb91b5b65fcfdaf72141f",
"status": "affected",
"version": "a09209acd6a808794bdd7866af3678d1fd1d90e7",
"versionType": "git"
}
]
},
{
"defaultStatus": "affected",
"product": "Linux",
"programFiles": [
"drivers/power/supply/act8945a_charger.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"status": "affected",
"version": "4.9"
},
{
"lessThan": "4.9",
"status": "unaffected",
"version": "0",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"version": "5.10.252",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"version": "5.15.202",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.1.*",
"status": "unaffected",
"version": "6.1.165",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.6.*",
"status": "unaffected",
"version": "6.6.128",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.12.*",
"status": "unaffected",
"version": "6.12.75",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.18.*",
"status": "unaffected",
"version": "6.18.14",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.19.*",
"status": "unaffected",
"version": "6.19.4",
"versionType": "semver"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "7.0",
"versionType": "original_commit_for_fix"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.10.252",
"versionStartIncluding": "4.9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.15.202",
"versionStartIncluding": "4.9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.1.165",
"versionStartIncluding": "4.9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.6.128",
"versionStartIncluding": "4.9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.12.75",
"versionStartIncluding": "4.9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.18.14",
"versionStartIncluding": "4.9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.19.4",
"versionStartIncluding": "4.9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "7.0",
"versionStartIncluding": "4.9",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: act8945a: Fix use-after-free in power_supply_changed()\n\nUsing the `devm_` variant for requesting IRQ _before_ the `devm_`\nvariant for allocating/registering the `power_supply` handle, means that\nthe `power_supply` handle will be deallocated/unregistered _before_ the\ninterrupt handler (since `devm_` naturally deallocates in reverse\nallocation order). This means that during removal, there is a race\ncondition where an interrupt can fire just _after_ the `power_supply`\nhandle has been freed, *but* just _before_ the corresponding\nunregistration of the IRQ handler has run.\n\nThis will lead to the IRQ handler calling `power_supply_changed()` with\na freed `power_supply` handle. Which usually crashes the system or\notherwise silently corrupts the memory...\n\nNote that there is a similar situation which can also happen during\n`probe()`; the possibility of an interrupt firing _before_ registering\nthe `power_supply` handle. This would then lead to the nasty situation\nof using the `power_supply` handle *uninitialized* in\n`power_supply_changed()`.\n\nFix this racy use-after-free by making sure the IRQ is requested _after_\nthe registration of the `power_supply` handle."
}
],
"providerMetadata": {
"dateUpdated": "2026-05-27T12:15:47.222Z",
"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"shortName": "Linux"
},
"references": [
{
"url": "https://git.kernel.org/stable/c/f2a0777b1e5a3cee1712c4d3e9095c0df8fc8cb3"
},
{
"url": "https://git.kernel.org/stable/c/0768e8525a46df103647ca5059b32320d7fd17e4"
},
{
"url": "https://git.kernel.org/stable/c/d023ef9f748b2090f7a9dbdd5c622b6ad99088ea"
},
{
"url": "https://git.kernel.org/stable/c/697bb5dc0cb4791e244f3970b067bc1ef33be9d9"
},
{
"url": "https://git.kernel.org/stable/c/76a42ba547a9b2e2337894f67a4d9247445007d5"
},
{
"url": "https://git.kernel.org/stable/c/f27eb76def5c07e4d7cc468b40741f19dafc83ce"
},
{
"url": "https://git.kernel.org/stable/c/83c1bd466c514cb24ca6ef347c5aac76a13c4e1e"
},
{
"url": "https://git.kernel.org/stable/c/3291c51d4684d048dd2eb91b5b65fcfdaf72141f"
}
],
"title": "power: supply: act8945a: Fix use-after-free in power_supply_changed()",
"x_generator": {
"engine": "bippy-1.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"assignerShortName": "Linux",
"cveId": "CVE-2026-45867",
"datePublished": "2026-05-27T12:15:47.222Z",
"dateReserved": "2026-05-13T15:03:33.080Z",
"dateUpdated": "2026-05-27T12:15:47.222Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}