CVE Database›Document archive›CVE-2026-46252

CVE-2026-46252

kernel: regulator: core: fix locking in regulator_resolve_supply() error path

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · June 3, 2026

Updated · November 2, 2026

Description

A flaw was found in the Linux kernel's regulator core. Incorrect handling of locking in the regulator_resolve_supply() function's error path can trigger a lockdep warning. This issue may allow for concurrent access problems, potentially leading to system instability or a denial of service (DoS) condition.

Statement

This vulnerability is rated as having Moderate impact because exploitation requires local access, depends on an uncommon error state during supply regulator resolution, and is limited to causing a denial of service without compromising data confidentiality or integrity. In standard Red Hat Enterprise Linux environments, regulator management operations occur during hardware device initialization and are not directly exposed to unprivileged users. As a result, the risk is largely confined to configurations where unprivileged local users can trigger specific device probe or supply binding failures.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-413 · Improper Resource Locking