CVE-2026-72182

Updated on 15 Aug 2026

Severity

Awaiting Analysis

Details

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

power: supply: charger-manager: fix refcount leak in is_full_charged()

In is_full_charged(), power_supply_get_by_name() is called to obtain a reference to the fuel_gauge power supply. If the voltage check (uV >= desc->fullbatt_uV) succeeds, the function returns true directly without releasing the reference, leaking the refcount.

Fix this by setting a flag and jumping to the out label where power_supply_put() properly drops the reference.

Details

Affected product:
Debian 10 ELS , Debian 11 ELS
Affected packages:
linux @ 5.10.259 (+1 more)

Fixes

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
Oracle Linux 9 UEK 7 Planned