{"id":"CVE-2026-89585","title":"auxdisplay: charlcd: cancel backlight work on registration failure","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nauxdisplay: charlcd: cancel backlight work on registration failure\n\nWith CONFIG_CHARLCD_BL_FLASH, charlcd_init() schedules bl_work before\ncharlcd_register() calls misc_…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-825"],"vendor":"Linux","product":"Linux","affected":["Linux >= 39f8ea46724efbed3ca021863a22337c31be264c < cd97b3c68fe3c06c8067cc59d7dff976c5b7ea04","Linux >= 39f8ea46724efbed3ca021863a22337c31be264c < 22586432c1aba89d9bd33f3173408dac830f220b","Linux >= 39f8ea46724efbed3ca021863a22337c31be264c < 6eaed64a32e550daf0dc9549742b3ab9e41d984f","Linux >= 39f8ea46724efbed3ca021863a22337c31be264c < fe7ba73dde94c5f413b1588cd444b49105015dda","Linux >= 39f8ea46724efbed3ca021863a22337c31be264c < 84858671842ae5857b9ed1202b62f9045373dcd1","Linux >= 39f8ea46724efbed3ca021863a22337c31be264c < ff2fb3c1e60cb247ea3e28c0ea0bea81c18f7755","Linux >= 39f8ea46724efbed3ca021863a22337c31be264c < e3e3bf40916c1e810df03958cfa7ba6883cdce79","Linux 4.12"],"published":"2026-09-11","updated":"2026-10-19","sourceUpdated":"2026-10-19T08:49:17.989Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-89585","references":[{"url":"https://git.kernel.org/stable/c/cd97b3c68fe3c06c8067cc59d7dff976c5b7ea04"},{"url":"https://git.kernel.org/stable/c/22586432c1aba89d9bd33f3173408dac830f220b"},{"url":"https://git.kernel.org/stable/c/6eaed64a32e550daf0dc9549742b3ab9e41d984f"},{"url":"https://git.kernel.org/stable/c/fe7ba73dde94c5f413b1588cd444b49105015dda"},{"url":"https://git.kernel.org/stable/c/84858671842ae5857b9ed1202b62f9045373dcd1"},{"url":"https://git.kernel.org/stable/c/ff2fb3c1e60cb247ea3e28c0ea0bea81c18f7755"},{"url":"https://git.kernel.org/stable/c/e3e3bf40916c1e810df03958cfa7ba6883cdce79"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89585.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-89585"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2532284"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-89585"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89585"},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89585.mbox"}],"tags":["cve.org","csaf","vex","red-hat","score-dispute"],"epss":0.00169,"epssPercentile":0.06186,"scores":{"cna":7.8,"vendor":5.5},"ingestedAt":"2026-09-14T15:23:07.451Z","slug":"CVE-2026-89585","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nauxdisplay: charlcd: cancel backlight work on registration failure\n\nWith CONFIG_CHARLCD_BL_FLASH, charlcd_init() schedules bl_work before\ncharlcd_register() calls misc_register(). If registration fails, the\ncaller frees the charlcd object while delayed work still contains its\naddress.\n\nAdd charlcd_deinit() to cancel the delayed work and turn the backlight\noff. Use it for both registration rollback and normal unregistration.\n\n## Affected\n\n- `Linux >= 39f8ea46724efbed3ca021863a22337c31be264c < cd97b3c68fe3c06c8067cc59d7dff976c5b7ea04`\n- `Linux >= 39f8ea46724efbed3ca021863a22337c31be264c < 22586432c1aba89d9bd33f3173408dac830f220b`\n- `Linux >= 39f8ea46724efbed3ca021863a22337c31be264c < 6eaed64a32e550daf0dc9549742b3ab9e41d984f`\n- `Linux >= 39f8ea46724efbed3ca021863a22337c31be264c < fe7ba73dde94c5f413b1588cd444b49105015dda`\n- `Linux >= 39f8ea46724efbed3ca021863a22337c31be264c < 84858671842ae5857b9ed1202b62f9045373dcd1`\n- `Linux >= 39f8ea46724efbed3ca021863a22337c31be264c < ff2fb3c1e60cb247ea3e28c0ea0bea81c18f7755`\n- `Linux >= 39f8ea46724efbed3ca021863a22337c31be264c < e3e3bf40916c1e810df03958cfa7ba6883cdce79`\n- `Linux 4.12`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · updated 2026-09-18 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89585.json)","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":224699,"id":"CVE-2026-89585","ts":1792401477389,"field":"cvss","old":"5.5","new":"7.8"},{"seq":224698,"id":"CVE-2026-89585","ts":1792401477389,"field":"severity","old":"medium","new":"high"},{"seq":208088,"id":"CVE-2026-89585","ts":1789922707175,"field":"cvss","old":"7.8","new":"5.5"},{"seq":208087,"id":"CVE-2026-89585","ts":1789922707175,"field":"severity","old":"high","new":"medium"},{"seq":197892,"id":"CVE-2026-89585","ts":1789384320837,"field":"cvss","old":"4.4","new":"7.8"},{"seq":197891,"id":"CVE-2026-89585","ts":1789384320837,"field":"severity","old":"medium","new":"high"},{"seq":183467,"id":"CVE-2026-89585","ts":1789356675485,"field":"cvss","old":"7.8","new":"4.4"},{"seq":183466,"id":"CVE-2026-89585","ts":1789356675485,"field":"severity","old":"high","new":"medium"},{"seq":153402,"id":"CVE-2026-89585","ts":1789285350369,"field":"cvss","old":null,"new":"7.8"},{"seq":153401,"id":"CVE-2026-89585","ts":1789285350369,"field":"severity","old":"none","new":"high"},{"seq":147438,"id":"CVE-2026-89585","ts":1789270210910,"field":"cvss","old":null,"new":"4.4"},{"seq":147437,"id":"CVE-2026-89585","ts":1789270210910,"field":"severity","old":"none","new":"medium"},{"seq":109192,"id":"CVE-2026-89585","ts":1789183730670,"field":"cvss","old":null,"new":"4.4"},{"seq":109191,"id":"CVE-2026-89585","ts":1789183730670,"field":"severity","old":"none","new":"medium"}]}