CVE-2026-64230
Received Received - Intake

Null Pointer Dereference in Linux Kernel Regulator Subsystem

Publication date: 2026-07-24

Last updated on: 2026-07-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: regulator: tps65219: fix irq_data.rdev not being assigned Commit 64a6b577490c ("regulator: tps65219: Remove debugging helper function") removed the tps65219_get_rdev_by_name() helper along with the irq_data.rdev assignment that depended on it. This left irq_data.rdev uninitialized for all IRQs, causing undefined behavior when regulator_notifier_call_chain() is called from the IRQ handler: Internal error: Oops: 0000000096000004 pc : regulator_notifier_call_chain lr : tps65219_regulator_irq_handler Call trace: regulator_notifier_call_chain tps65219_regulator_irq_handler handle_nested_irq regmap_irq_thread irq_thread_fn irq_thread kthread ret_from_fork Instead of restoring a dedicated lookup array, restructure the probe function to combine regulator registration with IRQ registration in the same loop. This way the rdev returned by devm_regulator_register() is naturally available for assigning to irq_data.rdev without any auxiliary data structure. Non-regulator IRQs (SENSOR, TIMEOUT) that don't correspond to any registered regulator are registered with rdev=NULL, and the IRQ handler is protected with a NULL check to avoid crashing.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-24
Last Modified
2026-07-24
Generated
2026-07-24
AI Q&A
2026-07-24
EPSS Evaluated
N/A
NVD
CVE-2026-64230
EUVD
EUVD-2026-48638

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a missing assignment in the tps65219 regulator driver. A debugging helper function was removed which previously assigned irq_data.rdev during IRQ handling. Without this assignment, the regulator notifier chain triggers an undefined behavior error when called from the IRQ handler, leading to a kernel oops.

Detection Guidance

This vulnerability is specific to the Linux kernel's regulator subsystem for the TPS65219 chip. Detection requires checking kernel logs for Oops errors related to regulator_notifier_call_chain or tps65219_regulator_irq_handler. Use commands like dmesg | grep -i 'regulator_notifier_call_chain' or dmesg | grep -i 'tps65219' to search for related errors.

Impact Analysis

This vulnerability can cause system instability or crashes when the affected IRQ handler is triggered. It may lead to kernel panics or unexpected behavior in systems using the tps65219 regulator, potentially disrupting device functionality that relies on this hardware component.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it pertains to a Linux kernel regulator driver issue causing undefined behavior in IRQ handling. No data exposure or privacy implications are described.

Mitigation Strategies

Apply the kernel patch that restructures the probe function to properly assign irq_data.rdev during regulator registration. Update to a kernel version containing the fix (commit 64a6b577490c or later). If immediate patching is not possible, disable the TPS65219 regulator IRQs as a temporary workaround.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64230. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart