PT-2026-46015 · Linux · Linux

Published 2026-06-03 · Updated 2026-06-03 · CVE-2026-46252

Mitre

In the Linux kernel, the following vulnerability has been resolved:

regulator: core: fix locking in regulator resolve supply() error path

If late enabling of a supply regulator fails in regulator resolve supply(), the code currently triggers a lockdep warning:

WARNING: drivers/regulator/core.c:2649 at regulator put+0x80/0xa0, CPU#6: kworker/u32:4/596 ... Call trace: regulator put+0x80/0xa0 (P) regulator resolve supply+0x7cc/0xbe0 regulator register resolve supply+0x28/0xb8

as the regulator list mutex must be held when calling regulator put().

To solve this, simply switch to using regulator put().

While at it, we should also make sure that no concurrent access happens to our rdev while we clear out the supply pointer. Add appropriate locking to ensure that.

While the code in question will be removed altogether in a follow-up commit, I believe it is still beneficial to have this corrected before removal for future reference.

Related Identifiers

CVE-2026-46252

Affected Products

Linux

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-46252 · Security Note
• https://git.kernel.org/stable/c/497330b203d2c59c5ff3fa4c34d14494d7203bc3 · Note
• https://git.kernel.org/stable/c/c66e0db0f37290b53c57994f998bb55590364fd0 · Note