CVE-2026-72314

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-72314", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-09T03:40:39.918Z", "datePublished": "2026-08-15T05:55:29.118Z", "dateUpdated": "2026-10-16T18:55:16.999Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-17T05:42:40.833Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nregulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK\n\nCompare against -EDEADLK, which is what ww_mutex_lock() actually\nreturns and what every other deadlock check in this file already uses.\n\nFunction regulator_lock_two() acquires two regulators via\nregulator_lock_nested() -> ww_mutex_lock(). On contention,\nww_mutex_lock() returns -EDEADLK, which is the caller's signal to drop\nthe lock it holds and retry the acquisition in the canonical order.\n\nHowever, regulator_lock_two() tests the return value against -EDEADLOCK\nrather than -EDEADLK. On most architectures, EDEADLK and EDEADLOCK are\nthe same value, so the comparison happens to be correct and the bug is\ninvisible. But on MIPS, SPARC, and PowerPC, those two errors have\ndifferent values. The test is wrong: a genuine -EDEADLK backoff no\nlonger matches -EDEADLOCK, so instead of unlocking and retrying, the\ncode falls into WARN_ON(ret) and returns with only one of the two\nregulators locked.\n\nIn practice, this is a bug only on MIPS, because the regulator core is\nnot built or used on the other two platforms.\n\nIn general, EDEADLK is preferred over EDEADLOCK for new code."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}, "scenarios": [{"lang": "en", "value": "AV:L - The bug is in drivers/regulator/core.c and is reached only through local kernel paths (regulator_register(), regulator_get()/devm_regulator_get(), and regulator_bus_probe()) during driver probing and supply resolution, not via any network protocol or remote packet handler.\nAC:L - Triggering -EDEADLK requires concurrent regulator_resolve_supply() on interdependent regulators; an attacker who can influence driver probing (e.g., parallel module loads or concurrent async platform probe work) controls both sides of the ww_mutex contention and can reliably force the mis-handled backoff path on MIPS.\nPR:L - Deliberate exploitation needs only basic local access on MIPS embedded/IoT systems where concurrent async regulator supply resolution during driver probe is common; hardened systems may require module-load privileges, but user namespaces do not gate this subsystem and misconfigured deployments widen reach.\nUI:N - No victim interaction is required once the attacker can trigger concurrent regulator supply resolution; exploitation is driven entirely by attacker-controlled driver probing/concurrency rather than requiring a user to mount, open, or configure anything.\nS:U - Impact is confined to kernel memory/locking integrity and local privilege boundaries (improperly locked regulator_dev state); it does not cross VM, container, or IOMMU security boundaries into a separate authority.\nC:H - Failing to acquire both regulator mutexes before set_supply()/create_regulator() permits unsynchronized list_add() to consumer_list and open_count updates, creating exploitable races that can yield kernel memory disclosure primitives alongside corruption.\nI:H - Operating on regulator_dev supply pointers, consumer_list, and open_count without holding both ww_mutex locks enables heap/list corruption and use-after-free style races that are reasonably leveragable for arbitrary kernel write or control-flow hijack on MIPS.\nA:H - The broken EDEADLK handling leaves regulators in an inconsistent partially-locked state, emitting WARN_ON and risking kernel deadlocks, hangs, or oops during concurrent supply resolution on MIPS systems where EDEADLK and EDEADLOCK differ."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/regulator/core.c"], "versions": [{"version": "06140d6dfe720d80566f792b4e28a9cd60a67970", "lessThan": "dc804f390fddd9c389edf0976356942e16878d8f", "status": "affected", "versionType": "git"}, {"version": "1e3056b8067c2e9b7741c4e588f0acacbe4bdafc", "lessThan": "8e39aa63798ea0a797fd9341419f12ef91df3238", "status": "affected", "versionType": "git"}, {"version": "849ab4cf182b38e562ffcc1b494d510e948822dd", "lessThan": "0c305eac40470a224671858a215963b070f9b2a9", "status": "affected", "versionType": "git"}, {"version": "cba6cfdc7c3f1516f0d08ddfb24e689af0932573", "lessThan": "29a7953e9adea6c7f9e64947745b79158e7cea7f", "status": "affected", "versionType": "git"}, {"version": "cba6cfdc7c3f1516f0d08ddfb24e689af0932573", "lessThan": "e2063307ea3b6da74585129ba7b588e8243e2ef0", "status": "affected", "versionType": "git"}, {"version": "cba6cfdc7c3f1516f0d08ddfb24e689af0932573", "lessThan": "346e2d666a29ae7233c56b356a0487eb1d42589b", "status": "affected", "versionType": "git"}, {"version": "cba6cfdc7c3f1516f0d08ddfb24e689af0932573", "lessThan": "153d1b8b5bc30847eb70ad535f62f289aa9217e6", "status": "affected", "versionType": "git"}, {"version": "cba6cfdc7c3f1516f0d08ddfb24e689af0932573", "lessThan": "d38f8bd771c4999b797d7074b348cf201414bd34", "status": "affected", "versionType": "git"}, {"version": "5224ea575196db11c0a909a78ea426ccdb92f064", "status": "affected", "versionType": "git"}, {"version": "435c65af581a61ca249bd8f717c3a147dc119f11", "status": "affected", "versionType": "git"}, {"version": "cdc042430ea9e07f77ce05a9d29e227dbdecc733", "status": "affected", "versionType": "git"}, {"version": "5.10.180", "lessThan": "5.10.261", "status": "affected", "versionType": "semver"}, {"version": "5.15.111", "lessThan": "5.15.212", "status": "affected", "versionType": "semver"}, {"version": "6.1.28", "lessThan": "6.1.178", "status": "affected", "versionType": "semver"}, {"version": "5.4.243", "lessThan": "5.5", "status": "affected", "versionType": "semver"}, {"version": "6.2.15", "lessThan": "6.3", "status": "affected", "versionType": "semver"}, {"version": "6.3.2", "lessThan": "6.4", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/regulator/core.c"], "versions": [{"version": "6.4", "status": "affected"}, {"version": "0", "lessThan": "6.4", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.261", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.212", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.178", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.145", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.97", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.40", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10.180", "versionEndExcluding": "5.10.261"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15.111", "versionEndExcluding": "5.15.212"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.1.28", "versionEndExcluding": "6.1.178"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "6.6.145"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "6.12.97"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "6.18.40"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "7.2"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.4.243"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.2.15"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.3.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/dc804f390fddd9c389edf0976356942e16878d8f"}, {"url": "https://git.kernel.org/stable/c/8e39aa63798ea0a797fd9341419f12ef91df3238"}, {"url": "https://git.kernel.org/stable/c/0c305eac40470a224671858a215963b070f9b2a9"}, {"url": "https://git.kernel.org/stable/c/29a7953e9adea6c7f9e64947745b79158e7cea7f"}, {"url": "https://git.kernel.org/stable/c/e2063307ea3b6da74585129ba7b588e8243e2ef0"}, {"url": "https://git.kernel.org/stable/c/346e2d666a29ae7233c56b356a0487eb1d42589b"}, {"url": "https://git.kernel.org/stable/c/153d1b8b5bc30847eb70ad535f62f289aa9217e6"}, {"url": "https://git.kernel.org/stable/c/d38f8bd771c4999b797d7074b348cf201414bd34"}], "title": "regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-72314", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-16T18:46:32.576217Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-16T18:55:16.999Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-72314", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-16T18:46:32.576217Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-16T18:46:33.379Z"}}], "cna": {"title": "regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK", "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "scenarios": [{"lang": "en", "value": "AV:L - The bug is in drivers/regulator/core.c and is reached only through local kernel paths (regulator_register(), regulator_get()/devm_regulator_get(), and regulator_bus_probe()) during driver probing and supply resolution, not via any network protocol or remote packet handler.\nAC:L - Triggering -EDEADLK requires concurrent regulator_resolve_supply() on interdependent regulators; an attacker who can influence driver probing (e.g., parallel module loads or concurrent async platform probe work) controls both sides of the ww_mutex contention and can reliably force the mis-handled backoff path on MIPS.\nPR:L - Deliberate exploitation needs only basic local access on MIPS embedded/IoT systems where concurrent async regulator supply resolution during driver probe is common; hardened systems may require module-load privileges, but user namespaces do not gate this subsystem and misconfigured deployments widen reach.\nUI:N - No victim interaction is required once the attacker can trigger concurrent regulator supply resolution; exploitation is driven entirely by attacker-controlled driver probing/concurrency rather than requiring a user to mount, open, or configure anything.\nS:U - Impact is confined to kernel memory/locking integrity and local privilege boundaries (improperly locked regulator_dev state); it does not cross VM, container, or IOMMU security boundaries into a separate authority.\nC:H - Failing to acquire both regulator mutexes before set_supply()/create_regulator() permits unsynchronized list_add() to consumer_list and open_count updates, creating exploitable races that can yield kernel memory disclosure primitives alongside corruption.\nI:H - Operating on regulator_dev supply pointers, consumer_list, and open_count without holding both ww_mutex locks enables heap/list corruption and use-after-free style races that are reasonably leveragable for arbitrary kernel write or control-flow hijack on MIPS.\nA:H - The broken EDEADLK handling leaves regulators in an inconsistent partially-locked state, emitting WARN_ON and risking kernel deadlocks, hangs, or oops during concurrent supply resolution on MIPS systems where EDEADLK and EDEADLOCK differ."}]}], "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "06140d6dfe720d80566f792b4e28a9cd60a67970", "lessThan": "dc804f390fddd9c389edf0976356942e16878d8f", "versionType": "git"}, {"status": "affected", "version": "1e3056b8067c2e9b7741c4e588f0acacbe4bdafc", "lessThan": "8e39aa63798ea0a797fd9341419f12ef91df3238", "versionType": "git"}, {"status": "affected", "version": "849ab4cf182b38e562ffcc1b494d510e948822dd", "lessThan": "0c305eac40470a224671858a215963b070f9b2a9", "versionType": "git"}, {"status": "affected", "version": "cba6cfdc7c3f1516f0d08ddfb24e689af0932573", "lessThan": "29a7953e9adea6c7f9e64947745b79158e7cea7f", "versionType": "git"}, {"status": "affected", "version": "cba6cfdc7c3f1516f0d08ddfb24e689af0932573", "lessThan": "e2063307ea3b6da74585129ba7b588e8243e2ef0", "versionType": "git"}, {"status": "affected", "version": "cba6cfdc7c3f1516f0d08ddfb24e689af0932573", "lessThan": "346e2d666a29ae7233c56b356a0487eb1d42589b", "versionType": "git"}, {"status": "affected", "version": "cba6cfdc7c3f1516f0d08ddfb24e689af0932573", "lessThan": "153d1b8b5bc30847eb70ad535f62f289aa9217e6", "versionType": "git"}, {"status": "affected", "version": "cba6cfdc7c3f1516f0d08ddfb24e689af0932573", "lessThan": "d38f8bd771c4999b797d7074b348cf201414bd34", "versionType": "git"}, {"status": "affected", "version": "5224ea575196db11c0a909a78ea426ccdb92f064", "versionType": "git"}, {"status": "affected", "version": "435c65af581a61ca249bd8f717c3a147dc119f11", "versionType": "git"}, {"status": "affected", "version": "cdc042430ea9e07f77ce05a9d29e227dbdecc733", "versionType": "git"}, {"status": "affected", "version": "5.10.180", "lessThan": "5.10.261", "versionType": "semver"}, {"status": "affected", "version": "5.15.111", "lessThan": "5.15.212", "versionType": "semver"}, {"status": "affected", "version": "6.1.28", "lessThan": "6.1.178", "versionType": "semver"}, {"status": "affected", "version": "5.4.243", "lessThan": "5.5", "versionType": "semver"}, {"status": "affected", "version": "6.2.15", "lessThan": "6.3", "versionType": "semver"}, {"status": "affected", "version": "6.3.2", "lessThan": "6.4", "versionType": "semver"}], "programFiles": ["drivers/regulator/core.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.4"}, {"status": "unaffected", "version": "0", "lessThan": "6.4", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.261", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.212", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.178", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.145", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.97", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.40", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.5", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/regulator/core.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/dc804f390fddd9c389edf0976356942e16878d8f"}, {"url": "https://git.kernel.org/stable/c/8e39aa63798ea0a797fd9341419f12ef91df3238"}, {"url": "https://git.kernel.org/stable/c/0c305eac40470a224671858a215963b070f9b2a9"}, {"url": "https://git.kernel.org/stable/c/29a7953e9adea6c7f9e64947745b79158e7cea7f"}, {"url": "https://git.kernel.org/stable/c/e2063307ea3b6da74585129ba7b588e8243e2ef0"}, {"url": "https://git.kernel.org/stable/c/346e2d666a29ae7233c56b356a0487eb1d42589b"}, {"url": "https://git.kernel.org/stable/c/153d1b8b5bc30847eb70ad535f62f289aa9217e6"}, {"url": "https://git.kernel.org/stable/c/d38f8bd771c4999b797d7074b348cf201414bd34"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nregulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK\n\nCompare against -EDEADLK, which is what ww_mutex_lock() actually\nreturns and what every other deadlock check in this file already uses.\n\nFunction regulator_lock_two() acquires two regulators via\nregulator_lock_nested() -> ww_mutex_lock(). On contention,\nww_mutex_lock() returns -EDEADLK, which is the caller's signal to drop\nthe lock it holds and retry the acquisition in the canonical order.\n\nHowever, regulator_lock_two() tests the return value against -EDEADLOCK\nrather than -EDEADLK. On most architectures, EDEADLK and EDEADLOCK are\nthe same value, so the comparison happens to be correct and the bug is\ninvisible. But on MIPS, SPARC, and PowerPC, those two errors have\ndifferent values. The test is wrong: a genuine -EDEADLK backoff no\nlonger matches -EDEADLOCK, so instead of unlocking and retrying, the\ncode falls into WARN_ON(ret) and returns with only one of the two\nregulators locked.\n\nIn practice, this is a bug only on MIPS, because the regulator core is\nnot built or used on the other two platforms.\n\nIn general, EDEADLK is preferred over EDEADLOCK for new code."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.10.261", "versionStartIncluding": "5.10.180"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.15.212", "versionStartIncluding": "5.15.111"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.1.178", "versionStartIncluding": "6.1.28"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.6.145", "versionStartIncluding": "6.4"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.12.97", "versionStartIncluding": "6.4"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.18.40", "versionStartIncluding": "6.4"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.1.5", "versionStartIncluding": "6.4"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.2", "versionStartIncluding": "6.4"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionStartIncluding": "5.4.243"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionStartIncluding": "6.2.15"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionStartIncluding": "6.3.2"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-17T05:42:40.833Z"}}}, "cveMetadata": {"cveId": "CVE-2026-72314", "state": "PUBLISHED", "dateUpdated": "2026-10-16T18:55:16.999Z", "dateReserved": "2026-08-09T03:40:39.918Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2026-08-15T05:55:29.118Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/regulator/core.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "dc804f390fddd9c389edf0976356942e16878d8f", "status": "affected", "version": "06140d6dfe720d80566f792b4e28a9cd60a67970", "versionType": "git"}, {"lessThan": "8e39aa63798ea0a797fd9341419f12ef91df3238", "status": "affected", "version": "1e3056b8067c2e9b7741c4e588f0acacbe4bdafc", "versionType": "git"}, {"lessThan": "0c305eac40470a224671858a215963b070f9b2a9", "status": "affected", "version": "849ab4cf182b38e562ffcc1b494d510e948822dd", "versionType": "git"}, {"lessThan": "29a7953e9adea6c7f9e64947745b79158e7cea7f", "status": "affected", "version": "cba6cfdc7c3f1516f0d08ddfb24e689af0932573", "versionType": "git"}, {"lessThan": "e2063307ea3b6da74585129ba7b588e8243e2ef0", "status": "affected", "version": "cba6cfdc7c3f1516f0d08ddfb24e689af0932573", "versionType": "git"}, {"lessThan": "346e2d666a29ae7233c56b356a0487eb1d42589b", "status": "affected", "version": "cba6cfdc7c3f1516f0d08ddfb24e689af0932573", "versionType": "git"}, {"lessThan": "153d1b8b5bc30847eb70ad535f62f289aa9217e6", "status": "affected", "version": "cba6cfdc7c3f1516f0d08ddfb24e689af0932573", "versionType": "git"}, {"lessThan": "d38f8bd771c4999b797d7074b348cf201414bd34", "status": "affected", "version": "cba6cfdc7c3f1516f0d08ddfb24e689af0932573", "versionType": "git"}, {"status": "affected", "version": "5224ea575196db11c0a909a78ea426ccdb92f064", "versionType": "git"}, {"status": "affected", "version": "435c65af581a61ca249bd8f717c3a147dc119f11", "versionType": "git"}, {"status": "affected", "version": "cdc042430ea9e07f77ce05a9d29e227dbdecc733", "versionType": "git"}, {"lessThan": "5.10.261", "status": "affected", "version": "5.10.180", "versionType": "semver"}, {"lessThan": "5.15.212", "status": "affected", "version": "5.15.111", "versionType": "semver"}, {"lessThan": "6.1.178", "status": "affected", "version": "6.1.28", "versionType": "semver"}, {"lessThan": "5.5", "status": "affected", "version": "5.4.243", "versionType": "semver"}, {"lessThan": "6.3", "status": "affected", "version": "6.2.15", "versionType": "semver"}, {"lessThan": "6.4", "status": "affected", "version": "6.3.2", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/regulator/core.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.4"}, {"lessThan": "6.4", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.261", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.212", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.178", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.145", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.97", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.40", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nregulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK\n\nCompare against -EDEADLK, which is what ww_mutex_lock() actually\nreturns and what every other deadlock check in this file already uses.\n\nFunction regulator_lock_two() acquires two regulators via\nregulator_lock_nested() -> ww_mutex_lock(). On contention,\nww_mutex_lock() returns -EDEADLK, which is the caller's signal to drop\nthe lock it holds and retry the acquisition in the canonical order.\n\nHowever, regulator_lock_two() tests the return value against -EDEADLOCK\nrather than -EDEADLK. On most architectures, EDEADLK and EDEADLOCK are\nthe same value, so the comparison happens to be correct and the bug is\ninvisible. But on MIPS, SPARC, and PowerPC, those two errors have\ndifferent values. The test is wrong: a genuine -EDEADLK backoff no\nlonger matches -EDEADLOCK, so instead of unlocking and retrying, the\ncode falls into WARN_ON(ret) and returns with only one of the two\nregulators locked.\n\nIn practice, this is a bug only on MIPS, because the regulator core is\nnot built or used on the other two platforms.\n\nIn general, EDEADLK is preferred over EDEADLOCK for new code."}], "id": "CVE-2026-72314", "lastModified": "2026-10-16T19:17:21.937", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-72314", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-16T18:46:32.576217Z", "version": "2.0.3"}}]}, "published": "2026-08-15T06:22:04.223", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/0c305eac40470a224671858a215963b070f9b2a9"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/153d1b8b5bc30847eb70ad535f62f289aa9217e6"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/29a7953e9adea6c7f9e64947745b79158e7cea7f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/346e2d666a29ae7233c56b356a0487eb1d42589b"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/8e39aa63798ea0a797fd9341419f12ef91df3238"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d38f8bd771c4999b797d7074b348cf201414bd34"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/dc804f390fddd9c389edf0976356942e16878d8f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/e2063307ea3b6da74585129ba7b588e8243e2ef0"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK", "id": "2516477", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2516477"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-1025", "details": ["A flaw was found in the Linux kernel's regulator core. The `regulator_lock_two()` function, responsible for acquiring two regulators, incorrectly checks for an error code (`EDEADLOCK`) instead of the correct one (`EDEADLK`). On certain architectures, such as MIPS, SPARC, and PowerPC, this discrepancy means that if a lock contention occurs, the system fails to properly retry the lock acquisition. This can result in the system operating with an incorrect lock state, potentially leading to system instability or a denial of service."], "name": "CVE-2026-72314", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-08-15T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-72314\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-72314\nhttps://lore.kernel.org/linux-cve-announce/2026081505-CVE-2026-72314-6e37@gregkh/T"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[06140d6dfe720d80566f792b4e28a9cd60a67970,dc804f390fddd9c389edf0976356942e16878d8f)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1e3056b8067c2e9b7741c4e588f0acacbe4bdafc,8e39aa63798ea0a797fd9341419f12ef91df3238)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[849ab4cf182b38e562ffcc1b494d510e948822dd,0c305eac40470a224671858a215963b070f9b2a9)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[cba6cfdc7c3f1516f0d08ddfb24e689af0932573,29a7953e9adea6c7f9e64947745b79158e7cea7f)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[cba6cfdc7c3f1516f0d08ddfb24e689af0932573,e2063307ea3b6da74585129ba7b588e8243e2ef0)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[cba6cfdc7c3f1516f0d08ddfb24e689af0932573,346e2d666a29ae7233c56b356a0487eb1d42589b)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[cba6cfdc7c3f1516f0d08ddfb24e689af0932573,153d1b8b5bc30847eb70ad535f62f289aa9217e6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[cba6cfdc7c3f1516f0d08ddfb24e689af0932573,d38f8bd771c4999b797d7074b348cf201414bd34)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "5224ea575196db11c0a909a78ea426ccdb92f064"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "435c65af581a61ca249bd8f717c3a147dc119f11"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "cdc042430ea9e07f77ce05a9d29e227dbdecc733"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.10.180,5.10.261)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.15.111,5.15.212)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.1.28,6.1.178)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.4.243,5.5.0)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.2.15,6.3.0)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.3.2,6.4.0)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.4"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,6.4.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.10.261,5.11.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.15.212,5.16.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.178,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.145,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.97,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.40,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.1.5,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-15T10:30:05.218124+00:00", "updated": "2026-08-22T11:15:04.608756+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}