{"id":"CVE-2026-98768","kind":"vulnerability","aliases":["CVE-2026-98768"],"related":[],"title":"Linux kernel: anx7411 USB-C driver can queue work after teardown","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: anx7411 - stop the IRQ before destroying the workqueue\n\nThe IRQ is devm-managed, so it can still queue plat->work while\nremove() is tearing the queue down. Disable it first.","summary":"In the Linux kernel's ANX7411 USB Type-C driver, the interrupt handler can still schedule work while the driver is being removed, because the interrupt was not disabled before its workqueue was destroyed. The sources do not describe a concrete attacker outcome, so this reads as a driver teardown race fixed in the kernel.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["embedded-hardware","infrastructure","linux-kernel","usb-typec"],"not_affected_if":["driver-not-loaded"],"how_to_check":"- `uname -r` to see the running kernel version\n- `lsmod | grep anx7411` to check whether the anx7411 Type-C driver is loaded\n- unknown whether the sources list affected kernel version ranges","fix":"- Update to a Linux kernel release that includes the upstream fix (the sources do not list fixed version numbers)\n- unknown which distribution kernel package carries the fix","status":"open","published_at":"2026-10-18T16:17:30+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","triaged_at":"2026-10-25T05:16:41+00:00","updated_at":"2026-10-25T05:16:41+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T05:16:41Z","model":"claude-haiku-5-5","output":{"fix":"- Update to a Linux kernel release that includes the upstream fix (the sources do not list fixed version numbers)\n- unknown which distribution kernel package carries the fix","reach":"local","title":"Linux kernel: anx7411 USB-C driver can queue work after teardown","impact":"low","summary":"In the Linux kernel's ANX7411 USB Type-C driver, the interrupt handler can still schedule work while the driver is being removed, because the interrupt was not disabled before its workqueue was destroyed. The sources do not describe a concrete attacker outcome, so this reads as a driver teardown race fixed in the kernel.","category":"infrastructure","nicknames":[],"who_cares":["linux-kernel","usb-typec","embedded-hardware"],"confidence":0.5,"needs_auth":"unknown","worst_case":"unknown; sources describe only a driver removal race","analyst_note":"","how_to_check":"- `uname -r` to see the running kernel version\n- `lsmod | grep anx7411` to check whether the anx7411 Type-C driver is loaded\n- unknown whether the sources list affected kernel version ranges","needs_analyst":false,"not_affected_if":["driver-not-loaded"],"who_is_affected":"Systems that load the anx7411 USB Type-C controller driver, typically hardware with an ANX7411 port controller. Systems without that hardware or without this driver loaded are unlikely to be affected. Whether the bug is reachable by an attacker is unknown from the sources.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.00061,"input_tokens":3309,"output_tokens":558,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-98768':15A,18A 'anx7411':3A,34B,97C 'attack':71B 'c':6A,38B 'concret':70B 'cve':13A,16A 'describ':68B 'destroy':63B,102C 'devm':109C 'devm-manag':108C 'disabl':58B,125C 'driver':7A,39B,49B,78B 'embed':20B 'embedded-hardwar':19B 'first':127C 'fix':81B 'follow':90C 'handler':42B 'hardwar':21B 'infrastructur':22B 'interrupt':41B,55B 'irq':100C,106C 'kernel':2A,25B,32B,84B,88C 'linux':1A,24B,31B,87C 'linux-kernel':23B 'manag':110C 'outcom':72B 'plat':116C 'queue':9A,115C,123C 'race':80B 'read':75B 'remov':52B,119C 'resolv':94C 'schedul':45B 'sourc':65B 'still':44B,114C 'stop':98C 'tear':121C 'teardown':12A,79B 'type':37B 'type-c':36B 'typec':28B,96C 'usb':5A,27B,35B,95C 'usb-c':4A 'usb-typec':26B 'vulner':91C 'work':10A,46B,117C 'workqueu':61B,104C","nicknames":[],"mitigations":[],"who_affected":"Systems that load the anx7411 USB Type-C controller driver, typically hardware with an ANX7411 port controller. Systems without that hardware or without this driver loaded are unlikely to be affected. Whether the bug is reachable by an attacker is unknown from the sources.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T16:17:30+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98768","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98768","severity":null,"published_at":"2026-10-18T16:17:30+00:00","modified_at":"2026-10-21T13:21:45+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}