CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's qcom_battmgr component, where a use-after-free condition can occur due to improper management of the PMIC GLINK service's notification mechanism. This flaw allows a pending or running worker to access freed memory, potentially leading to system instability or exploitation. Organizations utilizing Linux systems with Qualcomm battery management components should prioritize addressing this issue to mitigate risks associated with memory corruption.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: power: supply: qcom_battmgr: fix use-after-free qcom_battmgr_pdr_notify() queues enable_work when the PMIC GLINK service comes up, and the worker recovers battmgr through container_of() to issue firmware requests. The PMIC GLINK client stays on the client list until its devres release action runs, so a PDR notification can keep queueing the work, and a pending or running worker can access battmgr after devres frees it. Make enable_work device-managed with devm_work_autocancel(), registered before the PMIC GLINK client is allocated. The devres cleanup then releases the client first, so no further notification can queue the work, and cancels the work before battmgr is freed. This issue was found by an in-house static analysis tool.