# CVE-2023-54079: linux: In the Linux kernel, the following vulnerability has been resolved:  power: supply: bq27xxx: Fix poll_interval handli...

CVE-2023-54079 is fixed in linux on 1 platform, first by DEBIAN-CVE-2023-54079, released December 24, 2025. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2023-54079
- Priority: High
- CVSS: 7.8 (high)
- EPSS: 0.0017
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Dec 24, 2025

## Description

In the Linux kernel, the following vulnerability has been resolved:  power: supply: bq27xxx: Fix poll_interval handling and races on remove  Before this patch bq27xxx_battery_teardown() was setting poll_interval = 0 to avoid bq27xxx_battery_update() requeuing the delayed_work item.  There are 2 problems with this:  1. If the driver is unbound through sysfs, rather then the module being    rmmod-ed, this changes poll_interval unexpectedly  2. This is racy, after it being set poll_interval could be changed    before bq27xxx_battery_update() checks it through    /sys/module/bq27xxx_battery/parameters/poll_interval  Fix this by added a removed attribute to struct bq27xxx_device_info and using that instead of setting poll_interval to 0.  There also is another poll_interval related race on remove(), writing /sys/module/bq27xxx_battery/parameters/poll_interval will requeue the delayed_work item for all devices on the bq27xxx_battery_devices list and the device being removed was only removed from that list after cancelling the delayed_work item.  Fix this by moving the removal from the bq27xxx_battery_devices list to before cancelling the delayed_work item.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | linux Debian 12.15 (bookworm) | 6.1.37-1 | [DEBIAN-CVE-2023-54079](https://patchblox.com/security/data/fix/linux/debian-cve-2023-54079.md) | Dec 24, 2025 |
| Linux | linux Debian 13.5 (trixie) | 6.3.7-1 | [DEBIAN-CVE-2023-54079](https://patchblox.com/security/data/fix/linux/debian-cve-2023-54079.md) | Dec 24, 2025 |
| Linux | linux Debian 14 | 6.3.7-1 | [DEBIAN-CVE-2023-54079](https://patchblox.com/security/data/fix/linux/debian-cve-2023-54079.md) | Dec 24, 2025 |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo