CVE-2026-89465Medium· 5.5▾ SunlitA flaw was found in the Linux kernel, specifically within the rt9455 power supply driver. This vulnerability occurs due to improper management of delayed tasks when the device is being removed or if its initialization fails. A pending task…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 12.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.2%
— → 7.5
none → high
— → 7.5
none → high
— → 8.4
none → high
8.4 → 7.5
7.5 → 8.4
Last analysed / modified upstream
8.4 → 5.5
high → medium
A flaw was found in the Linux kernel, specifically within the rt9455 power supply driver. This vulnerability occurs due to improper management of delayed tasks when the device is being removed or if its initialization fails. A pending task can attempt to access memory that has already been released, leading to a use-after-free condition. This could allow a local attacker to cause the system to crash, resulting in a Denial of Service, or potentially lead to privilege escalation.
kernel: power: supply: rt9455: quiesce delayed work before teardown — rated Moderate by Red Hat. Released 2026-09-11, updated 2026-09-17.
Not affected:
Refer to the advisory for fix availability.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-89585Medium· 5.5kernel: auxdisplay: charlcd: cancel backlight work on registration failure (CVE-2026-89585)
CVE-2026-89594Medium· 5.5kernel: hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device (CVE-2026-89594)
CVE-2026-89597Medium· 5.5kernel: fbdev: uvesafb: unregister connector callback on init failure (CVE-2026-89597)
CVE-2026-89518Medium· 5.5kernel: sched_ext: Fix this_rq() assumptions in dispatch kfuncs (CVE-2026-89518)
CVE-2026-15801High· 8.0A vulnerability was found in CRI-O related to the container checkpoint and restore feature
CVE-2026-95897Medium· 5.5A security vulnerability has been detected in Dask up to 2026.8.0