DEBIAN-CVE-2023-54079
- Source
- https://security-tracker.debian.org/tracker/CVE-2023-54079
- Import Source
- https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-54079.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2023-54079
- Upstream
- Published
- 2025-12-24T13:16:09.750Z
- Modified
- 2025-12-25T11:20:04.294222Z
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved: power: supply: bq27xxx: Fix pollinterval handling and races on remove Before this patch bq27xxxbatteryteardown() was setting pollinterval = 0 to avoid bq27xxxbatteryupdate() requeuing the delayedwork item. There are 2 problems with this: 1. If the driver is unbound through sysfs, rather then the module being rmmod-ed, this changes pollinterval unexpectedly 2. This is racy, after it being set pollinterval could be changed before bq27xxxbatteryupdate() checks it through /sys/module/bq27xxxbattery/parameters/pollinterval Fix this by added a removed attribute to struct bq27xxxdeviceinfo and using that instead of setting pollinterval to 0. There also is another pollinterval related race on remove(), writing /sys/module/bq27xxxbattery/parameters/pollinterval will requeue the delayedwork item for all devices on the bq27xxxbatterydevices list and the device being removed was only removed from that list after cancelling the delayedwork item. Fix this by moving the removal from the bq27xxxbatterydevices list to before cancelling the delayedwork item.
- References
Affected packages
Debian:11 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.10.191-1
Affected versions
5.*
Debian:12 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:14 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source