CVE-2026-46252
kernel: regulator: core: fix locking in regulator_resolve_supply() error path
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 3, 2026
Updated · November 2, 2026
Description
A flaw was found in the Linux kernel's regulator core. Incorrect handling of locking in the regulator_resolve_supply() function's error path can trigger a lockdep warning. This issue may allow for concurrent access problems, potentially leading to system instability or a denial of service (DoS) condition.
Statement
This vulnerability is rated as having Moderate impact because exploitation requires local access, depends on an uncommon error state during supply regulator resolution, and is limited to causing a denial of service without compromising data confidentiality or integrity. In standard Red Hat Enterprise Linux environments, regulator management operations occur during hardware device initialization and are not directly exposed to unprivileged users. As a result, the risk is largely confined to configurations where unprivileged local users can trigger specific device probe or supply binding failures.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-413 · Improper Resource Locking