Wind River Support Network

HomeDefectsLIN1022-36508

Fixed

LIN1022-36508 : Security Advisory - linux - CVE-2026-90026

Created: Oct 7, 2026 Updated: Oct 8, 2026

Resolved Date: Oct 7, 2026

Found In Version: 10.22.33.2

Fix Version: 10.22.33.11

Severity: Standard

Applicable for: Wind River Linux LTS 22

Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:  usb: typec: qcom-pmic: cancel reset_work on stop  pdphy_stop() disables IRQs but leaves reset_work pending.  If the IRQ handler schedules it just before disable_irq(), the work runs after remove() frees the struct via devm.  Call cancel_work_sync() after disabling IRQs to close the window.  This issue was found by an in-house static analysis tool.