CVE-2026-90026 usb: typec: qcom-pmic: cancel reset_work on stop
A race condition in the Qualcomm PMIC USB Type-C driver allows use-after-free, potentially causing a system crash or denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-90026?
CVE-2026-90026 is a high-severity vulnerability in Linux, published on 16 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: qcom-pmic: cancel reset_work on stop
pdphy_stop() disables IRQs but leaves reset_work pending. If the IRQ handler schedules it just before disable_irq(), the work runs after remove() frees the struct via devm.
Call cancel_work_sync() after disabling IRQs to close the window.
This issue was found by an in-house static analysis tool.
Which versions are affected by CVE-2026-90026?
How do I fix CVE-2026-90026?
Apply the vendor's patch.
Is CVE-2026-90026 being exploited?
There is no known exploitation of CVE-2026-90026 in the wild and no public exploit code.
Sources
Also known as AZL-101655, BELL-CVE-2026-90026, DEBIAN-CVE-2026-90026, GHSA-7634-6gf7-r2f6, UBUNTU-CVE-2026-90026.