In the Linux kernel, the following vulnerability has been resolved:

power: supply: bq27xxx: Fix poll_interval handling and races on remove

Before this patch bq27xxx_battery_teardown() was setting poll_interval = 0
to avoid bq27xxx_battery_update() requeuing the delayed_work item.

There are 2 problems with this:

1. If the driver is unbound through sysfs, rather then the module being
rmmod-ed, this changes poll_interval unexpectedly

2. This is racy, after it being set poll_interval could be changed
before bq27xxx_battery_update() checks it through
/sys/module/bq27xxx_battery/parameters/poll_interval

Fix this by added a removed attribute to struct bq27xxx_device_info and
using that instead of setting poll_interval to 0.

There also is another poll_interval related race on remove(), writing
/sys/module/bq27xxx_battery/parameters/poll_interval will requeue
the delayed_work item for all devices on the bq27xxx_battery_devices
list and the device being removed was only removed from that list
after cancelling the delayed_work item.

Fix this by moving the removal from the bq27xxx_battery_devices list
to before cancelling the delayed_work item.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00036.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
8cfaaa811894a3ae2d7360a15a6cfccff3ebc7db affected < 4c9615474fb0a41cfad658d78db3c9ec70912969
8cfaaa811894a3ae2d7360a15a6cfccff3ebc7db affected < 465d919151a1e8d40daf366b868914f59d073211
8cfaaa811894a3ae2d7360a15a6cfccff3ebc7db affected < 0c5f4cec759679c290720fbcf6bb81768e21c95b
8cfaaa811894a3ae2d7360a15a6cfccff3ebc7db affected < e85757da9091998276ff21a13915ac25229cc232
8cfaaa811894a3ae2d7360a15a6cfccff3ebc7db affected < e98e5bebfcafc75a7b41192a607dfea5c1268afa
8cfaaa811894a3ae2d7360a15a6cfccff3ebc7db affected < d952a1eaafcc5f0351caad5dbe9b5b3300d1d529
8cfaaa811894a3ae2d7360a15a6cfccff3ebc7db affected < b12faeca0e819ea09051a705fef9df7ea7e9e18c
8cfaaa811894a3ae2d7360a15a6cfccff3ebc7db affected < c00bc80462afc7963f449d7f21d896d2f629cacc
Linux Linux affected
Version Status Constraints
3.3 affected —
0 unaffected < 3.3
4.14.316 unaffected ≤ 4.14.*
4.19.284 unaffected ≤ 4.19.*
5.4.244 unaffected ≤ 5.4.*
5.10.181 unaffected ≤ 5.10.*
5.15.114 unaffected ≤ 5.15.*
6.1.31 unaffected ≤ 6.1.*
6.3.5 unaffected ≤ 6.3.*
6.4 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0c5f4cec759679c290720fbcf6bb81768e21c95b cve-icon cve-icon
https://git.kernel.org/stable/c/465d919151a1e8d40daf366b868914f59d073211 cve-icon cve-icon
https://git.kernel.org/stable/c/4c9615474fb0a41cfad658d78db3c9ec70912969 cve-icon cve-icon
https://git.kernel.org/stable/c/b12faeca0e819ea09051a705fef9df7ea7e9e18c cve-icon cve-icon
https://git.kernel.org/stable/c/c00bc80462afc7963f449d7f21d896d2f629cacc cve-icon cve-icon
https://git.kernel.org/stable/c/d952a1eaafcc5f0351caad5dbe9b5b3300d1d529 cve-icon cve-icon
https://git.kernel.org/stable/c/e85757da9091998276ff21a13915ac25229cc232 cve-icon cve-icon
https://git.kernel.org/stable/c/e98e5bebfcafc75a7b41192a607dfea5c1268afa cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025122403-CVE-2023-54079-be62@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-54079 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-54079 cve-icon
History

Thu, 25 Dec 2025 12:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Moderate

Wed, 24 Dec 2025 13:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: power: supply: bq27xxx: Fix poll_interval handling and races on remove Before this patch bq27xxx_battery_teardown() was setting poll_interval = 0 to avoid bq27xxx_battery_update() requeuing the delayed_work item. There are 2 problems with this: 1. If the driver is unbound through sysfs, rather then the module being rmmod-ed, this changes poll_interval unexpectedly 2. This is racy, after it being set poll_interval could be changed before bq27xxx_battery_update() checks it through /sys/module/bq27xxx_battery/parameters/poll_interval Fix this by added a removed attribute to struct bq27xxx_device_info and using that instead of setting poll_interval to 0. There also is another poll_interval related race on remove(), writing /sys/module/bq27xxx_battery/parameters/poll_interval will requeue the delayed_work item for all devices on the bq27xxx_battery_devices list and the device being removed was only removed from that list after cancelling the delayed_work item. Fix this by moving the removal from the bq27xxx_battery_devices list to before cancelling the delayed_work item.
Title power: supply: bq27xxx: Fix poll_interval handling and races on remove
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-12-24T13:06:11.956Z

Reserved: 2025-12-24T13:02:52.514Z

Link: CVE-2023-54079

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-12-24T13:16:09.750

Modified: 2025-12-29T15:58:34.503

Link: CVE-2023-54079

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-12-24T00:00:00Z

Links: CVE-2023-54079 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.