CVE-2026-89585

Summary

In the Linux kernel, the following vulnerability has been resolved:

auxdisplay: charlcd: cancel backlight work on registration failure

With CONFIG_CHARLCD_BL_FLASH, charlcd_init() schedules bl_work before charlcd_register() calls misc_register(). If registration fails, the caller frees the charlcd object while delayed work still contains its address.

Add charlcd_deinit() to cancel the delayed work and turn the backlight off. Use it for both registration rollback and normal unregistration.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux39f8ea46724efbed3ca021863a22337c31be264c < cd97b3c68fe3c06c8067cc59d7dff976c5b7ea04affected
LinuxLinux39f8ea46724efbed3ca021863a22337c31be264c < 22586432c1aba89d9bd33f3173408dac830f220baffected
LinuxLinux39f8ea46724efbed3ca021863a22337c31be264c < 6eaed64a32e550daf0dc9549742b3ab9e41d984faffected
LinuxLinux39f8ea46724efbed3ca021863a22337c31be264c < fe7ba73dde94c5f413b1588cd444b49105015ddaaffected
LinuxLinux39f8ea46724efbed3ca021863a22337c31be264c < 84858671842ae5857b9ed1202b62f9045373dcd1affected
LinuxLinux39f8ea46724efbed3ca021863a22337c31be264c < ff2fb3c1e60cb247ea3e28c0ea0bea81c18f7755affected
LinuxLinux39f8ea46724efbed3ca021863a22337c31be264c < e3e3bf40916c1e810df03958cfa7ba6883cdce79affected
LinuxLinux4.12affected
LinuxLinux0 < 4.12unaffected
LinuxLinux5.15.221 <= 5.15.*unaffected
LinuxLinux6.1.188 <= 6.1.*unaffected
LinuxLinux6.6.157 <= 6.6.*unaffected
LinuxLinux6.12.109 <= 6.12.*unaffected
LinuxLinux6.18.50 <= 6.18.*unaffected
LinuxLinux7.2.4 <= 7.2.*unaffected
LinuxLinux7.3-rc1 <= *unaffected

Weaknesses

References