https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 07:56:27 +0000 https://vulnerability.circl.lu/vuln/cve-2023-54079 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>power: supply: bq27xxx: Fix poll_interval handling and races on remove</p> <p>Before this patch bq27xxx_battery_teardown() was setting poll_interval = 0 to avoid bq27xxx_battery_update() requeuing the delayed_work item.</p> <p>There are 2 problems with this:</p> <p>1. If the driver is unbound through sysfs, rather then the module being rmmod-ed, this changes poll_interval unexpectedly</p> <p>2. This is racy, after it being set poll_interval could be changed before bq27xxx_battery_update() checks it through /sys/module/bq27xxx_battery/parameters/poll_interval</p> <p>Fix this by added a removed attribute to struct bq27xxx_device_info and using that instead of setting poll_interval to 0.</p> <p>There also is another poll_interval related race on remove(), writing /sys/module/bq27xxx_battery/parameters/poll_interval will requeue the delayed_work item for all devices on the bq27xxx_battery_devices list and the device being removed was only removed from that list after cancelling the delayed_work item.</p> <p>Fix this by moving the removal from the bq27xxx_battery_devices list to before cancelling the delayed_work item.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>power: supply: bq27xxx: Fix poll_interval handling and races on remove</p> <p>Before this patch bq27xxx_battery_teardown() was setting poll_interval = 0 to avoid bq27xxx_battery_update() requeuing the delayed_work item.</p> <p>There are 2 problems with this:</p> <p>1. If the driver is unbound through sysfs, rather then the module being rmmod-ed, this changes poll_interval unexpectedly</p> <p>2. This is racy, after it being set poll_interval could be changed before bq27xxx_battery_update() checks it through /sys/module/bq27xxx_battery/parameters/poll_interval</p> <p>Fix this by added a removed attribute to struct bq27xxx_device_info and using that instead of setting poll_interval to 0.</p> <p>There also is another poll_interval related race on remove(), writing /sys/module/bq27xxx_battery/parameters/poll_interval will requeue the delayed_work item for all devices on the bq27xxx_battery_devices list and the device being removed was only removed from that list after cancelling the delayed_work item.</p> <p>Fix this by moving the removal from the bq27xxx_battery_devices list to before cancelling the delayed_work item.</p> https://vulnerability.circl.lu/vuln/cve-2023-54079