Remote Procedure Handling Vulnerability in Linux Kernel Affecting Qualcomm Devices

CVE-2026-93272

What is CVE-2026-93272?

A vulnerability exists within the Linux kernel's handling of power domain regulators in the remote process handling code specific to Qualcomm SDM632 devices. The issue arises when the information pointer is improperly incremented, which could lead to out-of-bounds access, particularly noticeable in kernels compiled with LLVM. This situation produces a 'regulator request with no identifier' error due to zeroed-out memory, impacting the kernel's functionality. The flaw has been addressed by avoiding the pointer increment when the number of power domains exceeds the number of available regulators, thus preventing the potential for exploitation.

References