The Linux kernel pm8916_lbc power supply driver allows a race condition where the power_supply handle is freed before the IRQ handler is unregistered, causing a use‑after‑free in power_supply_changed(). Based on the description, this can crash the system or silently corrupt memory. The likely attack vector is a hardware interrupt during device removal or probe, which may be triggered by a hot‑plug event or normal device operation.

All Linux kernel builds that include the pm8916_lbc driver before the patch that changes the order of IRQ registration and power_supply registration are affected. Vendor: Linux; Product: Linux Kernel power supply driver; specific affected versions are those before the commit referenced in the advisory.

The CVSS score is not provided, and the EPSS score is not available; the vulnerability is not listed in CISA KEV. Because it requires an interrupt that occurs during kernel‑level operations, exploitation is limited to privileged or device‑manipulation scenarios. Nonetheless, successful exploitation would result in a kernel panic or memory corruption, a high‑impact outcome. The overall risk is moderate to high, warranting prompt mitigation.