Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-72395

hwmon: (pmbus) Fix passing events to regulator core

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus) Fix passing events to regulator core Sashiko reports: Commit 754bd2b4a084 ("hwmon: (pmbus/core) Protect regulator operations with mutex") introduced a worker to batch regulator events over time using atomic_or(). The delayed worker then passes the combined bitmask unmodified to regulator_notifier_call_chain(). The core regulator subsystem's regulator_handle_critical() function evaluates the event parameter using a strict switch statement. If multiple distinct faults occur before the worker runs (e.g., REGULATOR_EVENT_UNDER_VOLTAGE | REGULATOR_EVENT_OVER_CURRENT), the combined bitmask fails to match any case. This leaves the reason as NULL and completely bypasses the critical hw_protection_trigger(). Fix the problem by passing events bit by bit to the regulator event handler.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • b26849cffaa7c43355b82e9bef3725e786973a1a to < 2106bf4056858fcce3624e0c51f6fee4d41d3f2faffected
  • acf04e2863132f6d9222f71f3a76fb9782cbe061 to < 48fe43666950efefb7ac5fbdc012c1b3604096bfaffected
  • 4e9d723d9f198b86f6882a84c501ba1f39e8d055 to < 489291b6b56978cc50d34e8e13f9636ea296ba8aaffected
  • 754bd2b4a084b90b5e7b630e1f423061a9b9b761 to < b0ff6b6ae9c5183ef701ece7016698bde5a5bfbaaffected
  • 754bd2b4a084b90b5e7b630e1f423061a9b9b761 to < 9ef7dacd44216bf5ea05c8aef49eba4d145f4047affected
  • f0c9ea9c3a208e79c812e10e2bcef87b46564f01affected
  • 2c77ae315f3ce9d2c8e1609be74c9358c1fe4e07affected
  • 6.6.143 to < 6.6.145affected
  • 6.12.92 to < 6.12.97affected
  • 6.18.21 to < 6.18.40affected
  • 6.1.191 to < 6.2affected
  • 6.19.11 to < 6.20affected

Linux Linux

Default version status: affected

  • 7.0affected
  • 0 to < 7.0unaffected
  • 6.6.145 to ≤ 6.6.*unaffected
  • 6.12.97 to ≤ 6.12.*unaffected
  • 6.18.40 to ≤ 6.18.*unaffected
  • 7.1.5 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References