Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-89585

auxdisplay: charlcd: cancel backlight work on registration failure

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.15.221, 6.1.188, 6.6.157, 6.12.109, 6.18.50, and 1 more
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: auxdisplay: charlcd: cancel backlight work on registration failure With CONFIG_CHARLCD_BL_FLASH, charlcd_init() schedules bl_work before charlcd_register() calls misc_register(). If registration fails, the caller frees the charlcd object while delayed work still contains its address. Add charlcd_deinit() to cancel the delayed work and turn the backlight off. Use it for both registration rollback and normal unregistration.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From 39f8ea46724efbed3ca021863a22337c31be264c · fixed in cd97b3c68fe3c06c8067cc59d7dff976c5b7ea04; From 39f8ea46724efbed3ca021863a22337c31be264c · fixed in 22586432c1aba89d9bd33f3173408dac830f220b; From 39f8ea46724efbed3ca021863a22337c31be264c · fixed in 6eaed64a32e550daf0dc9549742b3ab9e41d984f; From 39f8ea46724efbed3ca021863a22337c31be264c · fixed in fe7ba73dde94c5f413b1588cd444b49105015dda; From 39f8ea46724efbed3ca021863a22337c31be264c · fixed in 84858671842ae5857b9ed1202b62f9045373dcd1; From 39f8ea46724efbed3ca021863a22337c31be264c · fixed in ff2fb3c1e60cb247ea3e28c0ea0bea81c18f7755; From 39f8ea46724efbed3ca021863a22337c31be264c · fixed in e3e3bf40916c1e810df03958cfa7ba6883cdce79

  • Linux Linux

    4.12

  • KernelLinux

    From 4.12.0 · fixed in 5.15.221; From 5.16.0 · fixed in 6.1.188; From 6.2.0 · fixed in 6.6.157; From 6.7.0 · fixed in 6.12.109; From 6.13.0 · fixed in 6.18.50; From 6.19.0 · fixed in 7.2.4

References 7

git.kernel.org