CVE-2023-54079: Linux

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: power: supply: bq27xxx: Fix poll_interval handling and races on remove Before this patch bq27xxx_battery_teardown() was setting poll_interval = 0 to avoid bq27xxx_battery_update() requeuing the delayed_work item. There are 2 problems with this: 1. If the driver is unbound through sysfs, rather then the module being rmmod-ed, this changes poll_interval unexpectedly 2. This is racy, after it being set poll_interval could be changed before bq27xxx_battery_update() checks it through /sys/module/bq27xxx_battery/parameters/poll_interval Fix this by added a removed attribute to struct bq27xxx_device_info and using that instead of setting poll_interval to 0. There also is another poll_interval related race on remove(), writing /sys/module/bq27xxx_battery/parameters/poll_interval will requeue the delayed_work item for all devices on the bq27xxx_battery_devices list and the device being removed was only removed from that list after cancelling the delayed_work item. Fix this by moving the removal from the bq27xxx_battery_devices list to before cancelling the delayed_work item.

Affected products

• Linux Linux: from 3.3, before 4.14.316 (fixed in 4.14.316); from 4.15, before 4.19.284 (fixed in 4.19.284); from 4.20, before 5.4.244 (fixed in 5.4.244); from 5.5, before 5.10.181 (fixed in 5.10.181); from 5.11, before 5.15.114 (fixed in 5.15.114); from 5.16, before 6.1.31 (fixed in 6.1.31); …

Published 2025-12-24. Last modified 2026-08-04.