CVE-2026-90360

A flaw was found in the Linux kernel's regulator core subsystem. A race condition can occur during system suspend when the regulator_init_complete_work attempts to disable unused regulators via the I2C bus. This happens because the work is scheduled on a non-freezable workqueue, allowing it to run concurrently with the system suspend process. If the I2C adapter is suspended prematurely, it can lead to warnings and potential instability or unexpected behavior of the I2C bus, effectively causing a denial of service for affected components.

Red Hat has evaluated this issue as having a Low security impact because triggering the condition requires initiating a power suspend state within a narrow timing window shortly after system initialization. Enterprise Linux environments typically do not employ system sleep or suspend states, substantially minimizing real-world exposure. In addition, an occurrence results primarily in non-fatal kernel warnings during bus communication without impacting system confidentiality or integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.