← Zurück zur CVE-Suche

CVE-2026-72395

linux

Beschreibung

In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus) Fix passing events to regulator core Sashiko reports: Commit 754bd2b4a084 (-hwmon: (pmbus/core) Protect regulator operations with mutex-) introduced a worker to batch regulator events over time using atomic_or(). The delayed worker then passes the combined bitmask unmodified to regulator_notifier_call_chain(). The core regulator subsystem-s regulator_handle_critical() function evaluates the event parameter using a strict switch statement. If multiple distinct faults occur before the worker runs (e.g., REGULATOR_EVENT_UNDER_VOLTAGE | REGULATOR_EVENT_OVER_CURRENT), the combined bitmask fails to match any case. This leaves the reason as NULL and completely bypasses the critical hw_protection_trigger(). Fix the problem by passing events bit by bit to the regulator event handler.

CVSS 7.1EPSS 0.169%Risiko 0.72
Quelle öffnen
Veröffentlicht
2026-08-15 06:22:13
Betroffene Versionen
unknown
Typ
Kernel
Zuletzt geändert
2026-08-17 06:19:05
Vektor
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H