CVE-2026-46252

{"id": "CVE-2026-46252", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2026-06-03T18:16:25.797", "references": [{"url": "https://git.kernel.org/stable/c/497330b203d2c59c5ff3fa4c34d14494d7203bc3", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c66e0db0f37290b53c57994f998bb55590364fd0", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-667"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nregulator: core: fix locking in regulator_resolve_supply() error path\n\nIf late enabling of a supply regulator fails in\nregulator_resolve_supply(), the code currently triggers a lockdep\nwarning:\n\n WARNING: drivers/regulator/core.c:2649 at _regulator_put+0x80/0xa0, CPU#6: kworker/u32:4/596\n ...\n Call trace:\n _regulator_put+0x80/0xa0 (P)\n regulator_resolve_supply+0x7cc/0xbe0\n regulator_register_resolve_supply+0x28/0xb8\n\nas the regulator_list_mutex must be held when calling _regulator_put().\n\nTo solve this, simply switch to using regulator_put().\n\nWhile at it, we should also make sure that no concurrent access happens\nto our rdev while we clear out the supply pointer. Add appropriate\nlocking to ensure that.\n\nWhile the code in question will be removed altogether in a follow-up\ncommit, I believe it is still beneficial to have this corrected before\nremoval for future reference."}], "lastModified": "2026-06-09T20:42:31.367", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EACE7ACD-1611-41BF-B757-A23CEC8346ED", "versionEndExcluding": "6.19.4", "versionStartIncluding": "4.2.1"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:4.2:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37D5F2FA-B7D0-4F9D-BC97-F450E5839C7B"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:4.2:rc4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8C5DADE2-2A31-4F65-8A7E-224C02958A81"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:4.2:rc5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "130E1C2A-45DE-4C16-8FFA-06E9C9F7F175"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:4.2:rc6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "78F0CC21-E28A-4B83-B65B-94AB9242F345"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:4.2:rc7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AED16DC6-6364-4B57-92A1-F14F347DADF7"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:4.2:rc8:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "03A4BCF1-5A7D-4E74-948F-134F0E57D73B"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}