{"id":"CVE-2026-89473","summary":"power: supply: bq25890: Fix power_supply reference leak","details":"In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: bq25890: Fix power_supply reference leak\n\nbq25890_fw_probe() acquires a reference to a secondary charger using\npower_supply_get_by_name(), but the reference is not released on later\nprobe failures or on driver detach.\n\nIn particular, failures after bq25890_fw_probe() returns successfully,\nsuch as a failure in bq25890_hw_init(), also leak the reference.\n\nRegister a device-managed cleanup action immediately after acquiring\nthe secondary charger. This releases the reference on all subsequent\nprobe failures and on driver detach.\n\nFound by code review.","modified":"2026-09-13T03:47:18.078486218Z","published":"2026-09-11T19:43:31.214Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89473.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/238320ad029a3eedabb86286a28cab55bca629b9"},{"type":"WEB","url":"https://git.kernel.org/stable/c/58f1025eca92734eadc063715b98f62538286468"},{"type":"WEB","url":"https://git.kernel.org/stable/c/81b558afda9321c1a70971a39071d156f3e26950"},{"type":"WEB","url":"https://git.kernel.org/stable/c/863c32a83e4235eb0cbf6106f2b124e645302156"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89473.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89473"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"d54bf877fd878ee45cbc88d399fb98b0b1c4484d"},{"fixed":"81b558afda9321c1a70971a39071d156f3e26950"},{"fixed":"238320ad029a3eedabb86286a28cab55bca629b9"},{"fixed":"58f1025eca92734eadc063715b98f62538286468"},{"fixed":"863c32a83e4235eb0cbf6106f2b124e645302156"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89473.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.0"},{"fixed":"6.12.109"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.50"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.2.4"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89473.json"}}],"schema_version":"1.9.0"}