In the Linux kernel, the following vulnerability has been resolved: power: supply: max77705: Free allocated workqueue and fix removal order Use devm interface for allocating workqueue to fix two bugs at the same time: 1. Driver leaks the memory on remove(), because the workqueue is not destroyed. 2. Driver allocates workqueue and then registers interrupt handlers with devm interface. This means that probe error paths will not use a reversed order, but first destroy the workqueue and then, via devm release handlers, free the interrupt. The interrupt handler schedules work on this exact workqueue, thus if interrupt is hit in this short time window - after destroying workqueue, but before devm() frees the interrupt - the schedulled work will lead to use of freed memory. Change is not equivalent in the workqueue itself: use non-legacy API which does not set (__WQ_LEGACY | WQ_MEM_RECLAIM). The workqueue is used to update power supply (power_supply_changed()) status, thus there is no point to run it for memory reclaim. Note that dev_name() is not directly used in second argument to prevent possible unlikely parsing any "%" character in device name as format.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In the Linux kernel, the following vulnerability has been resolved: power: supply: max77705: Free
    allocated workqueue and fix removal order Use devm interface for allocating workqueue to fix two bugs at
    the same time: 1. Driver leaks the memory on remove(), because the workqueue is not destroyed. 2. Driver
    allocates workqueue and then registers interrupt handlers with devm interface. This means that probe error
    paths will not use a reversed order, but first destroy the workqueue and then, via devm release handlers,
    free the interrupt. The interrupt handler schedules work on this exact workqueue, thus if interrupt is hit
    in this short time window - after destroying workqueue, but before devm() frees the interrupt - the
    schedulled work will lead to use of freed memory. Change is not equivalent in the workqueue itself: use
    non-legacy API which does not set (__WQ_LEGACY | WQ_MEM_RECLAIM). The workqueue is used to update power
    supply (power_supply_changed()) status, thus there is no point to run it for memory reclaim. Note that
    dev_name() is not directly used in second argument to prevent possible unlikely parsing any "%" character
    in device name as format. (CVE-2026-53308)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - power: supply: max77705: Free allocated workqueue and fix removal order Use devm interface for allocating     workqueue to fix two bugs at the same time: 1. Driver leaks the memory on remove(), because the workqueue     is not destroyed. 2. Driver allocates workqueue and then registers interrupt handlers with devm interface.
    This means that probe error paths will not use a reversed order, but first destroy the workqueue and then,     via devm release handlers, free the interrupt. The interrupt handler schedules work on this exact     workqueue, thus if interrupt is hit in this short time window - after destroying workqueue, but before     devm() frees the interrupt - the schedulled work will lead to use of freed memory. Change is not     equivalent in the workqueue itself: use non-legacy API which does not set (__WQ_LEGACY | WQ_MEM_RECLAIM).
    The workqueue is used to update power supply (power_supply_changed()) status, thus there is no point to     run it for memory reclaim. Note that dev_name() is not directly used in second argument to prevent     possible unlikely parsing any % character in device name as format. (CVE-2026-53308)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
473069	Chainguard: multiple linux-gcp-6.18-bootc packages: security update to 6.18.38-r2	Tenable Cloud Security	Chainguard Local Security Checks	Local	medium
473069	Chainguard: multiple linux-gcp-6.18-bootc packages: security update to 6.18.38-r2	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	medium
343532	Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (GCP) vulnerabilities (USN-8728-1)	Nessus	Ubuntu Local Security Checks	Local	high
340681	Ubuntu 24.04 LTS / 26.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-8663-1)	Nessus	Ubuntu Local Security Checks	Local	high
340045	Ubuntu 26.04 LTS : Linux kernel (NVIDIA BaseOS) vulnerabilities (USN-8664-1)	Nessus	Ubuntu Local Security Checks	Local	high
323793	Linux Distros Unpatched Vulnerability : CVE-2026-53308	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-53308

medium

Tenable Plugins

medium

medium

high

high

high

medium