CVE-2026-90360

regulator: core: use system_freezable_wq for init complete work

Published Sep 17, 2026 CVSS n/a EPSS < 1% KEV · Not listed

Description

In the Linux kernel, the following vulnerability has been resolved:

regulator: core: use system_freezable_wq for init complete work

schedule_delayed_work() uses system_wq, which is non-freezable, allowing
regulator_init_complete_work to run concurrently with system suspend. This
work fires ~30s after boot to disable unused regulators via I2C. When it
races with PM suspend, the I2C adapter may already be suspended, triggering
a -ESHUTDOWN warning in __i2c_transfer():

WARNING: ... at __i2c_transfer+0x36c/0x3c8
Call trace:
__i2c_transfer
i2c_transfer
regmap_i2c_write
_regmap_update_bits
regulator_disable_regmap
_regulator_do_disable
regulator_late_cleanup
regulator_init_complete_work_function
process_one_work

Switch to system_freezable_wq so the work is frozen before any device
is suspended, eliminating the race.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`8b8c8d69b1a31004517d4c71a490f47bdf3405a2`	affected	< 8a2ae3ab348cce44120667277c2198f10cc348b1
`d7ce17fba6c8e316ca9a554a87edddce6f862435`	affected	< 350a0cba90e1bd40b1fe5b396923d2f3a61d1056
`55576cf1853798e86f620766e23b604c9224c19c`	affected	< 2cebc00340a585adeffe321bc41f1937eb79a4dc
`55576cf1853798e86f620766e23b604c9224c19c`	affected	< 9cf65270c1c1717c84dcfacd58a782c1186b0cbf
`55576cf1853798e86f620766e23b604c9224c19c`	affected	< dc8570a5b830190bf0b57017c35aef97cd6ad7d9
`55576cf1853798e86f620766e23b604c9224c19c`	affected	< 6d0a2c5e210f2fba099129e6183ef81316a6ae48
`55576cf1853798e86f620766e23b604c9224c19c`	affected	< 0d23d658d79925076026fff62a49b8c94e0e8922
`55576cf1853798e86f620766e23b604c9224c19c`	affected	< 0b950aa7ec95e120b2bde745ca9a7ed3ce49d528
`55576cf1853798e86f620766e23b604c9224c19c`	affected	< 29dc2e24f6adb36dcb884acf455644c397a67471
`55576cf1853798e86f620766e23b604c9224c19c`	affected	< 03eab318cedd6ae34ecd34533cd986edf5237164
`c4f65c2fb0f5c488d4ae606fba94bb98dcf383fd`	affected	—
`d6acb54716ffab29f15c66082bd751410b284764`	affected	—
`3fbfa415a5dd8fc78076c1ead160a03a058cd9f6`	affected	—
`4.9.195`	affected	< 4.9.207
`4.14.147`	affected	< 4.14.160
`4.19.77`	affected	< 4.20
`5.2.19`	affected	< 5.3
`5.3.4`	affected	< 5.4

Linux

affected

Version	Status	Constraints
`5.4`	affected	—
`0`	unaffected	< 5.4
`4.9.207`	unaffected	≤ 4.9.*
`4.14.160`	unaffected	≤ 4.14.*
`5.10.270`	unaffected	≤ 5.10.*
`5.15.221`	unaffected	≤ 5.15.*
`6.1.188`	unaffected	≤ 6.1.*
`6.6.157`	unaffected	≤ 6.6.*
`6.12.110`	unaffected	≤ 6.12.*
`6.18.52`	unaffected	≤ 6.18.*
`7.2.6`	unaffected	≤ 7.2.*
`7.3`	unaffected	≤ *

No data.

Vendor Product Versions

Linux

Linux Kernel

Version	Status	Scheme	Platform
`[8b8c8d69b1a31004517d4c71a490f47bdf3405a2,8a2ae3ab348cce44120667277c2198f10cc348b1)`	affected	code_commit	—
`[d7ce17fba6c8e316ca9a554a87edddce6f862435,350a0cba90e1bd40b1fe5b396923d2f3a61d1056)`	affected	code_commit	—
`[55576cf1853798e86f620766e23b604c9224c19c,2cebc00340a585adeffe321bc41f1937eb79a4dc)`	affected	code_commit	—
`[55576cf1853798e86f620766e23b604c9224c19c,9cf65270c1c1717c84dcfacd58a782c1186b0cbf)`	affected	code_commit	—
`[55576cf1853798e86f620766e23b604c9224c19c,dc8570a5b830190bf0b57017c35aef97cd6ad7d9)`	affected	code_commit	—
`[55576cf1853798e86f620766e23b604c9224c19c,6d0a2c5e210f2fba099129e6183ef81316a6ae48)`	affected	code_commit	—
`[55576cf1853798e86f620766e23b604c9224c19c,0d23d658d79925076026fff62a49b8c94e0e8922)`	affected	code_commit	—
`[55576cf1853798e86f620766e23b604c9224c19c,0b950aa7ec95e120b2bde745ca9a7ed3ce49d528)`	affected	code_commit	—
`[55576cf1853798e86f620766e23b604c9224c19c,29dc2e24f6adb36dcb884acf455644c397a67471)`	affected	code_commit	—
`[55576cf1853798e86f620766e23b604c9224c19c,03eab318cedd6ae34ecd34533cd986edf5237164)`	affected	code_commit	—
`[c4f65c2fb0f5c488d4ae606fba94bb98dcf383fd,*]`	affected	code_commit	—
`[d6acb54716ffab29f15c66082bd751410b284764,*]`	affected	code_commit	—
`[3fbfa415a5dd8fc78076c1ead160a03a058cd9f6,*]`	affected	code_commit	—
`[4.9.195,4.9.207)`	affected	semver	—
`[4.14.147,4.14.160)`	affected	semver	—
`[4.19.77,4.20)`	affected	semver	—
`[5.2.19,5.3)`	affected	semver	—
`[5.3.4,5.4)`	affected	semver	—

Linux

Linux Kernel

Version	Status	Scheme	Platform
`5.4`	affected	semver	—
`[0,5.4)`	unaffected	generic	—
`[4.9.207,4.9.*]`	unaffected	generic	—
`[4.14.160,4.14.*]`	unaffected	generic	—
`[5.10.270,5.10.*]`	unaffected	generic	—
`[5.15.221,5.15.*]`	unaffected	generic	—
`[6.1.188,6.1.*]`	unaffected	generic	—
`[6.6.157,6.6.*]`	unaffected	generic	—
`[6.12.110,6.12.*]`	unaffected	generic	—
`[6.18.52,6.18.*]`	unaffected	generic	—
`[7.2.6,7.2.*]`	unaffected	generic	—
`[7.3-rc1,*]`	unaffected	generic	—

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

Source	ID	Title
Debian DLA	DLA-4817-1	linux-6.12 security update
Debian DLA	DLA-4841-1	linux security update
Debian DSA	DSA-6528-1	linux security update
Ubuntu USN	USN-8961-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9019-1	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-9020-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9022-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9023-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9024-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9025-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9026-1	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-9029-1	Linux kernel (Raspberry Pi) vulnerabilities
Ubuntu USN	USN-9039-1	Linux kernel (Azure CVM) vulnerabilities
Ubuntu USN	USN-9040-1	Linux kernel (Low Latency NVIDIA) vulnerabilities
Ubuntu USN	USN-9066-1	Linux kernel (HWE) vulnerabilities
Ubuntu USN	USN-9091-1	Linux kernel (NVIDIA Tegra) vulnerabilities

Metrics

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.245% probability within 30 days)

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/03eab318cedd6ae34ecd34533cd986edf5237164
https://git.kernel.org/stable/c/0b950aa7ec95e120b2bde745ca9a7ed3ce49d528
https://git.kernel.org/stable/c/0d23d658d79925076026fff62a49b8c94e0e8922
https://git.kernel.org/stable/c/29dc2e24f6adb36dcb884acf455644c397a67471
https://git.kernel.org/stable/c/2cebc00340a585adeffe321bc41f1937eb79a4dc
https://git.kernel.org/stable/c/350a0cba90e1bd40b1fe5b396923d2f3a61d1056
https://git.kernel.org/stable/c/6d0a2c5e210f2fba099129e6183ef81316a6ae48
https://git.kernel.org/stable/c/8a2ae3ab348cce44120667277c2198f10cc348b1
https://git.kernel.org/stable/c/9cf65270c1c1717c84dcfacd58a782c1186b0cbf
https://git.kernel.org/stable/c/dc8570a5b830190bf0b57017c35aef97cd6ad7d9

History

Sep 19, 2026 3:15 PM Weaknesses updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-362

Sep 17, 2026 4:30 PM Description updated. Title updated. First appearance in the feed. Affected versions updated. Affected vendors updated. Added references View changes

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: regulator: core: use system_freezable_wq for init complete work schedule_delayed_work() uses system_wq, which is non-freezable, allowing regulator_init_complete_work to run concurrently with system suspend. This work fires ~30s after boot to disable unused regulators via I2C. When it races with PM suspend, the I2C adapter may already be suspended, triggering a -ESHUTDOWN warning in __i2c_transfer(): WARNING: ... at __i2c_transfer+0x36c/0x3c8 Call trace: __i2c_transfer i2c_transfer regmap_i2c_write _regmap_update_bits regulator_disable_regmap _regulator_do_disable regulator_late_cleanup regulator_init_complete_work_function process_one_work Switch to system_freezable_wq so the work is frozen before any device is suspended, eliminating the race.
Title		regulator: core: use system_freezable_wq for init complete work
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/03eab318cedd6ae34ecd34533cd986edf5237164 https://git.kernel.org/stable/c/0b950aa7ec95e120b2bde745ca9a7ed3ce49d528 https://git.kernel.org/stable/c/0d23d658d79925076026fff62a49b8c94e0e8922 https://git.kernel.org/stable/c/29dc2e24f6adb36dcb884acf455644c397a67471 https://git.kernel.org/stable/c/2cebc00340a585adeffe321bc41f1937eb79a4dc https://git.kernel.org/stable/c/350a0cba90e1bd40b1fe5b396923d2f3a61d1056 https://git.kernel.org/stable/c/6d0a2c5e210f2fba099129e6183ef81316a6ae48 https://git.kernel.org/stable/c/8a2ae3ab348cce44120667277c2198f10cc348b1 https://git.kernel.org/stable/c/9cf65270c1c1717c84dcfacd58a782c1186b0cbf https://git.kernel.org/stable/c/dc8570a5b830190bf0b57017c35aef97cd6ad7d9