5.5
MEDIUM
CVSS 3.1
CVE-2026-46252
regulator: core: fix locking in regulator_resolve_supply() error path
Overview
Description
In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix locking in regulator_resolve_supply() error path If late enabling of a supply regulator fails in regulator_resolve_supply(), the code currently triggers a lockdep warning: WARNING: drivers/regulator/core.c:2649 at _regulator_put+0x80/0xa0, CPU#6: kworker/u32:4/596 ... Call trace: _regulator_put+0x80/0xa0 (P) regulator_resolve_supply+0x7cc/0xbe0 regulator_register_resolve_supply+0x28/0xb8 as the regulator_list_mutex must be held when calling _regulator_put(). To solve this, simply switch to using regulator_put(). While at it, we should also make sure that no concurrent access happens to our rdev while we clear out the supply pointer. Add appropriate locking to ensure that. While the code in question will be removed altogether in a follow-up commit, I believe it is still beneficial to have this corrected before removal for future reference.
Details
INFO
Published Date :
June 3, 2026, 6:16 p.m.
Last Modified :
July 22, 2026, 8:10 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Scoring
CVSS Scores
The Common Vulnerability Scoring System is a standardized framework
for assessing the severity of vulnerabilities in software and systems.
We collect and displays CVSS scores from various sources for each CVE.
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | MEDIUM | [email protected] |
Solution
Fix locking in regulator_resolve_supply error path to prevent lockdep warnings.
- Switch to using regulator_put() in the error path.
- Add appropriate locking to prevent concurrent access.
- Apply the provided patch or update the kernel.
Public PoC/Exploit Available at Github
CVE-2026-46252 has a 1 public
PoC/Exploit available at Github.
Go to the Public Exploits tab to see the list.
References
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-46252.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-46252 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-46252
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
DSA and DLA for Debian last 14 days
Python
Updated: 2 weeks, 1 day ago
2 stars
1 fork
1 watcher
Born at : Feb. 12, 2025, 2:08 p.m.
This repo has been linked 584 different CVEs too.
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-46252 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-46252 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Translated by [email protected]
Jul. 22, 2026
Action Type Old Value New Value Added Translation Title: Linux, Description: En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: regulator: core: corregir el bloqueo en la ruta de error de regulator_resolve_supply() Si la habilitación tardía de un regulador de suministro falla en regulator_resolve_supply(), el código actualmente activa una advertencia de lockdep: ADVERTENCIA: drivers/regulator/core.c:2649 at _regulator_put+0x80/0xa0, CPU#6: kworker/u32:4/596 ... Traza de llamada: _regulator_put+0x80/0xa0 (P) regulator_resolve_supply+0x7cc/0xbe0 regulator_register_resolve_supply+0x28/0xb8 ya que el regulator_list_mutex debe mantenerse al llamar a _regulator_put(). Para resolver esto, simplemente cambie a usar regulator_put(). Ya que estamos en ello, también deberíamos asegurarnos de que no ocurra ningún acceso concurrente a nuestro rdev mientras borramos el puntero de suministro. Añada un bloqueo apropiado para asegurar eso. Aunque el código en cuestión será eliminado por completo en un commit de seguimiento, creo que sigue siendo beneficioso tener esto corregido antes de la eliminación para futuras referencias. -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jul. 04, 2026
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/3b7fffd7a8984a1c009f668765ee7631fd6b87c8 Added Reference https://git.kernel.org/stable/c/60747114fd2a38739130b715e7b2d40ce848f0be Added Reference https://git.kernel.org/stable/c/a8a2eab1166bc33ee38ca371cff425bdb5681e47 Added Reference https://git.kernel.org/stable/c/c84860dac7af7dc3c3e3c9ae86d65e222c2f3b0c Added Reference https://git.kernel.org/stable/c/e77357dc2293283fc08a485b1e2e571d91d02622 Changed Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '36a1f1b6ddc6d1442424e29548e790633ca39c7b', 'lessThan': 'bde74af8d4466213007bdd42cc85fa72c861dea7', 'versionType': 'git'}, {'status': 'affected', 'version': '36a1f1b6ddc6d1442424e29548e790633ca39c7b', 'lessThan': 'c66e0db0f37290b53c57994f998bb55590364fd0', 'versionType': 'git'}, {'status': 'affected', 'version': '36a1f1b6ddc6d1442424e29548e790633ca39c7b', 'lessThan': '497330b203d2c59c5ff3fa4c34d14494d7203bc3', 'versionType': 'git'}], 'programFiles': ['drivers/regulator/core.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '4.2'}, {'status': 'unaffected', 'version': '0', 'lessThan': '4.2', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '6.18.37', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '6.19.4', 'versionType': 'semver', 'lessThanOrEqual': '6.19.*'}, {'status': 'unaffected', 'version': '7.0', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/regulator/core.c'], 'defaultStatus': 'affected'}] [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '36a1f1b6ddc6d1442424e29548e790633ca39c7b', 'lessThan': 'e77357dc2293283fc08a485b1e2e571d91d02622', 'versionType': 'git'}, {'status': 'affected', 'version': '36a1f1b6ddc6d1442424e29548e790633ca39c7b', 'lessThan': 'a8a2eab1166bc33ee38ca371cff425bdb5681e47', 'versionType': 'git'}, {'status': 'affected', 'version': '36a1f1b6ddc6d1442424e29548e790633ca39c7b', 'lessThan': '60747114fd2a38739130b715e7b2d40ce848f0be', 'versionType': 'git'}, {'status': 'affected', 'version': '36a1f1b6ddc6d1442424e29548e790633ca39c7b', 'lessThan': 'c84860dac7af7dc3c3e3c9ae86d65e222c2f3b0c', 'versionType': 'git'}, {'status': 'affected', 'version': '36a1f1b6ddc6d1442424e29548e790633ca39c7b', 'lessThan': '3b7fffd7a8984a1c009f668765ee7631fd6b87c8', 'versionType': 'git'}, {'status': 'affected', 'version': '36a1f1b6ddc6d1442424e29548e790633ca39c7b', 'lessThan': 'bde74af8d4466213007bdd42cc85fa72c861dea7', 'versionType': 'git'}, {'status': 'affected', 'version': '36a1f1b6ddc6d1442424e29548e790633ca39c7b', 'lessThan': 'c66e0db0f37290b53c57994f998bb55590364fd0', 'versionType': 'git'}, {'status': 'affected', 'version': '36a1f1b6ddc6d1442424e29548e790633ca39c7b', 'lessThan': '497330b203d2c59c5ff3fa4c34d14494d7203bc3', 'versionType': 'git'}], 'programFiles': ['drivers/regulator/core.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '4.2'}, {'status': 'unaffected', 'version': '0', 'lessThan': '4.2', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '5.10.260', 'versionType': 'semver', 'lessThanOrEqual': '5.10.*'}, {'status': 'unaffected', 'version': '5.15.211', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.177', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.144', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.95', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.37', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '6.19.4', 'versionType': 'semver', 'lessThanOrEqual': '6.19.*'}, {'status': 'unaffected', 'version': '7.0', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/regulator/core.c'], 'defaultStatus': 'affected'}] -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jun. 27, 2026
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/bde74af8d4466213007bdd42cc85fa72c861dea7 Changed Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '36a1f1b6ddc6d1442424e29548e790633ca39c7b', 'lessThan': 'c66e0db0f37290b53c57994f998bb55590364fd0', 'versionType': 'git'}, {'status': 'affected', 'version': '36a1f1b6ddc6d1442424e29548e790633ca39c7b', 'lessThan': '497330b203d2c59c5ff3fa4c34d14494d7203bc3', 'versionType': 'git'}], 'programFiles': ['drivers/regulator/core.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '4.2'}, {'status': 'unaffected', 'version': '0', 'lessThan': '4.2', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '6.19.4', 'versionType': 'semver', 'lessThanOrEqual': '6.19.*'}, {'status': 'unaffected', 'version': '7.0', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/regulator/core.c'], 'defaultStatus': 'affected'}] [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '36a1f1b6ddc6d1442424e29548e790633ca39c7b', 'lessThan': 'bde74af8d4466213007bdd42cc85fa72c861dea7', 'versionType': 'git'}, {'status': 'affected', 'version': '36a1f1b6ddc6d1442424e29548e790633ca39c7b', 'lessThan': 'c66e0db0f37290b53c57994f998bb55590364fd0', 'versionType': 'git'}, {'status': 'affected', 'version': '36a1f1b6ddc6d1442424e29548e790633ca39c7b', 'lessThan': '497330b203d2c59c5ff3fa4c34d14494d7203bc3', 'versionType': 'git'}], 'programFiles': ['drivers/regulator/core.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '4.2'}, {'status': 'unaffected', 'version': '0', 'lessThan': '4.2', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '6.18.37', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '6.19.4', 'versionType': 'semver', 'lessThanOrEqual': '6.19.*'}, {'status': 'unaffected', 'version': '7.0', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/regulator/core.c'], 'defaultStatus': 'affected'}] -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jun. 17, 2026
Action Type Old Value New Value Added Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '36a1f1b6ddc6d1442424e29548e790633ca39c7b', 'lessThan': 'c66e0db0f37290b53c57994f998bb55590364fd0', 'versionType': 'git'}, {'status': 'affected', 'version': '36a1f1b6ddc6d1442424e29548e790633ca39c7b', 'lessThan': '497330b203d2c59c5ff3fa4c34d14494d7203bc3', 'versionType': 'git'}], 'programFiles': ['drivers/regulator/core.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '4.2'}, {'status': 'unaffected', 'version': '0', 'lessThan': '4.2', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '6.19.4', 'versionType': 'semver', 'lessThanOrEqual': '6.19.*'}, {'status': 'unaffected', 'version': '7.0', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/regulator/core.c'], 'defaultStatus': 'affected'}] -
Initial Analysis by [email protected]
Jun. 09, 2026
Action Type Old Value New Value Added CVSS V3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Added CWE CWE-667 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:4.2:rc8:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:4.2:rc7:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:4.2:rc6:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:4.2:rc5:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:4.2:rc4:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:4.2:-:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.2.1 up to (excluding) 6.19.4 Added Reference Type kernel.org: https://git.kernel.org/stable/c/497330b203d2c59c5ff3fa4c34d14494d7203bc3 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/c66e0db0f37290b53c57994f998bb55590364fd0 Types: Patch -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jun. 03, 2026
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix locking in regulator_resolve_supply() error path If late enabling of a supply regulator fails in regulator_resolve_supply(), the code currently triggers a lockdep warning: WARNING: drivers/regulator/core.c:2649 at _regulator_put+0x80/0xa0, CPU#6: kworker/u32:4/596 ... Call trace: _regulator_put+0x80/0xa0 (P) regulator_resolve_supply+0x7cc/0xbe0 regulator_register_resolve_supply+0x28/0xb8 as the regulator_list_mutex must be held when calling _regulator_put(). To solve this, simply switch to using regulator_put(). While at it, we should also make sure that no concurrent access happens to our rdev while we clear out the supply pointer. Add appropriate locking to ensure that. While the code in question will be removed altogether in a follow-up commit, I believe it is still beneficial to have this corrected before removal for future reference. Added Reference https://git.kernel.org/stable/c/497330b203d2c59c5ff3fa4c34d14494d7203bc3 Added Reference https://git.kernel.org/stable/c/c66e0db0f37290b53c57994f998bb55590364fd0
EPSS is a daily estimate of the probability of exploitation activity
being observed over the next 30 days. Following chart shows the EPSS
score history of the vulnerability.