All vulnerabilities
CVE-2026-93272

Linux: remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.19%Chance of exploitation activity in the next 30 days, higher than 7% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in7abab59d6c99ba2b8101d6f44ad25159b1510724Also 2e7e39bb81913feaac463b7add46bafdca06fbde, 3dbc90b9c22ea96e37bf55f6011e63b5123ec668 and 5 moreCVE List
Published24 Sep 2026Updated 21 Oct 2026CVE List

What fixes it

Show all 8 fixed versions

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3

The changes introduced to handle single power domain platforms have swapped the info pointer increment from num_pd_vregs to num_pds, which would shift the info pointer past the end of the array for pronto-v3, which does not list power domain regulators in vregs.

This showed up as a difference between GCC- and LLVM-compiled kernels on SDM632 devices, where only with LLVM one would get the "regulator request with no identifier" error, because the out-of-bounds memory ended up being zeroed. Fix by skipping the increment when there are more power domains than regulators.

Text from CVE List

Affected versions 20

  • Linuxaffected: fef1e1487dea81c2b4560e393ba4b0be57e28d01 before 7abab59d6c99ba2b8101d6f44ad25159b1510724CVE List
  • Linuxaffected: 69bb5b3ae348040e385113efba5bdc76396644d0 before e572cbb513cde53d90fb4729cad75056cd647ce3CVE List
  • Linuxaffected: 65991ea8a6d1e68effdc01d95ebe39f1653f7b71 before 2e7e39bb81913feaac463b7add46bafdca06fbdeCVE List
  • Linuxaffected: 65991ea8a6d1e68effdc01d95ebe39f1653f7b71 before bce6b48af3abf7468d12ef4933f21bd8c1d822e9CVE List
  • Linuxaffected: 65991ea8a6d1e68effdc01d95ebe39f1653f7b71 before 3dbc90b9c22ea96e37bf55f6011e63b5123ec668CVE List
  • Linuxaffected: 654c295f9079d2c7875172142022168e34c4e34eCVE List
  • Linuxaffected: 8d0d4c11cace475f1b07f98ee3d2bd334590e17bCVE List
  • Linuxaffected: 04a89c98810d2dba8187120c07fdb732aa40ca14CVE List
  • Linuxaffected: 6.6.93 before 6.6.160CVE List
  • Linuxaffected: 6.12.31 before 6.12.114CVE List
  • Linuxaffected: 5.15.185 before 5.16CVE List
  • Linuxaffected: 6.1.141 before 6.2CVE List
  • Linuxaffected: 6.14.9 before 6.15CVE List
  • Linuxaffected: 6.15CVE List
  • Linuxunaffected: all versions before 6.15CVE List
  • Linuxunaffected: 6.6.160 through 6.6.*CVE List
  • Linuxunaffected: 6.12.114 through 6.12.*CVE List
  • Linuxunaffected: 6.18.57 through 6.18.*CVE List
  • Linuxunaffected: 7.2.6 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 5