---
id: CVE-2026-72182
title: 'power: supply: charger-manager: fix refcount leak in is_full_charged()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  power: supply: charger-manager: fix refcount leak in is_full_charged()

  In is_full_charged(), power_supply_get_by_name() is called to
  obtain a reference to the fuel_gau…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= e132fc6bb89bd307cfcdb8ba24afcd1985261485 <
    afe3202c30bdff0635818ab525fe2694309d2692
  - >-
    Linux >= e132fc6bb89bd307cfcdb8ba24afcd1985261485 <
    93b99b63ad5657225faf702670ddfeddf1f0ae29
  - >-
    Linux >= e132fc6bb89bd307cfcdb8ba24afcd1985261485 <
    6f75912cc6ff4c05ff13af351c4eea49b6b3c078
  - >-
    Linux >= e132fc6bb89bd307cfcdb8ba24afcd1985261485 <
    e44ad91e9f75f3e3ccbdb85ffe699471f9675e5b
  - >-
    Linux >= e132fc6bb89bd307cfcdb8ba24afcd1985261485 <
    3999f47e4bbf864e3c7fbfd813fb2f651e6b5714
  - >-
    Linux >= e132fc6bb89bd307cfcdb8ba24afcd1985261485 <
    193e6471e985c2f25d09b3fe96ec52f4eab89bd4
  - >-
    Linux >= e132fc6bb89bd307cfcdb8ba24afcd1985261485 <
    e8631b883338ea4c3b5d8ddfbe16407af9f0b4b9
  - >-
    Linux >= e132fc6bb89bd307cfcdb8ba24afcd1985261485 <
    4373cfa38ead58f980362c841b0d0bdf8c4d956c
  - Linux 5.10
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:52:34.692857Z'
published: '2026-08-15'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:55:21.998Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-72182'
references:
  - url: 'https://git.kernel.org/stable/c/afe3202c30bdff0635818ab525fe2694309d2692'
  - url: 'https://git.kernel.org/stable/c/93b99b63ad5657225faf702670ddfeddf1f0ae29'
  - url: 'https://git.kernel.org/stable/c/6f75912cc6ff4c05ff13af351c4eea49b6b3c078'
  - url: 'https://git.kernel.org/stable/c/e44ad91e9f75f3e3ccbdb85ffe699471f9675e5b'
  - url: 'https://git.kernel.org/stable/c/3999f47e4bbf864e3c7fbfd813fb2f651e6b5714'
  - url: 'https://git.kernel.org/stable/c/193e6471e985c2f25d09b3fe96ec52f4eab89bd4'
  - url: 'https://git.kernel.org/stable/c/e8631b883338ea4c3b5d8ddfbe16407af9f0b4b9'
  - url: 'https://git.kernel.org/stable/c/4373cfa38ead58f980362c841b0d0bdf8c4d956c'
tags:
  - cve.org
epss: 0.0022
epssPercentile: 0.12545
ingestedAt: '2026-11-06T18:00:12.594Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

power: supply: charger-manager: fix refcount leak in is_full_charged()

In is_full_charged(), power_supply_get_by_name() is called to
obtain a reference to the fuel_gauge power supply. If the
voltage check (uV >= desc->fullbatt_uV) succeeds, the function
returns true directly without releasing the reference, leaking
the refcount.

Fix this by setting a flag and jumping to the out label where
power_supply_put() properly drops the reference.

## Affected

- `Linux >= e132fc6bb89bd307cfcdb8ba24afcd1985261485 < afe3202c30bdff0635818ab525fe2694309d2692`
- `Linux >= e132fc6bb89bd307cfcdb8ba24afcd1985261485 < 93b99b63ad5657225faf702670ddfeddf1f0ae29`
- `Linux >= e132fc6bb89bd307cfcdb8ba24afcd1985261485 < 6f75912cc6ff4c05ff13af351c4eea49b6b3c078`
- `Linux >= e132fc6bb89bd307cfcdb8ba24afcd1985261485 < e44ad91e9f75f3e3ccbdb85ffe699471f9675e5b`
- `Linux >= e132fc6bb89bd307cfcdb8ba24afcd1985261485 < 3999f47e4bbf864e3c7fbfd813fb2f651e6b5714`
- `Linux >= e132fc6bb89bd307cfcdb8ba24afcd1985261485 < 193e6471e985c2f25d09b3fe96ec52f4eab89bd4`
- `Linux >= e132fc6bb89bd307cfcdb8ba24afcd1985261485 < e8631b883338ea4c3b5d8ddfbe16407af9f0b4b9`
- `Linux >= e132fc6bb89bd307cfcdb8ba24afcd1985261485 < 4373cfa38ead58f980362c841b0d0bdf8c4d956c`
- `Linux 5.10`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.