CVE-2026-64230
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
24/07/2026
Última modificación:
24/07/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
regulator: tps65219: fix irq_data.rdev not being assigned<br />
<br />
Commit 64a6b577490c ("regulator: tps65219: Remove debugging helper<br />
function") removed the tps65219_get_rdev_by_name() helper along with<br />
the irq_data.rdev assignment that depended on it. This left<br />
irq_data.rdev uninitialized for all IRQs, causing undefined behavior<br />
when regulator_notifier_call_chain() is called from the IRQ handler:<br />
<br />
Internal error: Oops: 0000000096000004<br />
pc : regulator_notifier_call_chain<br />
lr : tps65219_regulator_irq_handler<br />
Call trace:<br />
regulator_notifier_call_chain<br />
tps65219_regulator_irq_handler<br />
handle_nested_irq<br />
regmap_irq_thread<br />
irq_thread_fn<br />
irq_thread<br />
kthread<br />
ret_from_fork<br />
<br />
Instead of restoring a dedicated lookup array, restructure the probe<br />
function to combine regulator registration with IRQ registration in<br />
the same loop. This way the rdev returned by devm_regulator_register()<br />
is naturally available for assigning to irq_data.rdev without any<br />
auxiliary data structure.<br />
<br />
Non-regulator IRQs (SENSOR, TIMEOUT) that don&#39;t correspond to any<br />
registered regulator are registered with rdev=NULL, and the IRQ handler<br />
is protected with a NULL check to avoid crashing.



