Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-89936— iio: dac: m62332: Fix regulator reference count imbalance

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Linux 内核中，已修复如下漏洞： iio: dac: m62332: 修复 regulator 引用计数不平衡问题 函数在每次写入非零值时都会启用 Vcc regulator，在每次写入零值时都会禁用它，且未跟踪通道当前的状态。由于 regulator 采用引用计数机制，当通道从一个非零值直接切换到另一个非零值时，会多次启用该 regulator；而随后写入零值时仅禁用一次。这导致引用计数无法归零，regulator 将一直保持启用状态。 修复方案如下： 仅在通道值从零变为非零时启用 regulator，仅

AI Predicted 5.5 Difficulty: Theoretical EPSS 0.22% · P12

Possible ATT&CK Techniques 1 AI

T1486 · Data Encrypted for Impact

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux b87b0c0f81e8d11c881b726b886b7502ab67d884< bac0ed8bee651aa841375edf72c6ab1d10ac80c6 affected
b87b0c0f81e8d11c881b726b886b7502ab67d884< 9263b9ad968a563337a60e0eb66e35186e1faf9a affected
b87b0c0f81e8d11c881b726b886b7502ab67d884< 1d3a7d7dd3adee19e00be2b2237140f0fe169484 affected
b87b0c0f81e8d11c881b726b886b7502ab67d884< f5acb824277a97a5210c454872202bf7f08c75d4 affected
b87b0c0f81e8d11c881b726b886b7502ab67d884< ae18d2d2ef27a4d04fda6e30c23774513dc9be1e affected
b87b0c0f81e8d11c881b726b886b7502ab67d884< 08ac8d2976d57aa943d64e351c4d0bd8bb0c6de9 affected
b87b0c0f81e8d11c881b726b886b7502ab67d884< 9fe22f563b2a0fdb11fd3711a8c39c023629c08a affected
b87b0c0f81e8d11c881b726b886b7502ab67d884< a130404ce0b69ca1438126bd81c1985d3b4d2e6f affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-89936

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
iio: dac: m62332: Fix regulator reference count imbalance
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: iio: dac: m62332: Fix regulator reference count imbalance m62332_set_value() enables the Vcc regulator on every write of a non-zero value and disables it on every write of zero, without tracking the channel's current state. Because the regulator is reference counted, changing a channel directly from one non-zero value to another enables it more than once, while a later write of zero disables it only once. The reference count never returns to zero and the regulator is left enabled indefinitely. Only enable the regulator on the transition from zero to non-zero, and only disable it on the transition from non-zero to zero, using the previously stored channel value to detect the edge. Balance the regulator on the I2C error path so the reference count stays consistent if the write fails.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux b87b0c0f81e8d11c881b726b886b7502ab67d884 ~ bac0ed8bee651aa841375edf72c6ab1d10ac80c6 -
Linux Linux 4.2 -

II. Public POCs for CVE-2026-89936

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-89936

请登录查看更多情报信息。

Other References for CVE-2026-89936 (8)

Same Patch Batch · Linux · 2026-09-16 · 276 CVEs total

CVE-2026-90048 9.8 CRITICAL fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()
CVE-2026-90012 9.8 CRITICAL spi: Fix DMA mapping ownership on partial map failure
CVE-2026-89970 9.8 CRITICAL nvmet-auth: Synchronize timeout work during SQ teardown
CVE-2026-89857 9.8 CRITICAL scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject
CVE-2026-89969 9.8 CRITICAL nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU
CVE-2026-89847 9.8 CRITICAL scsi: qla2xxx: Avoid double completion in async IOCB timeout
CVE-2026-89972 9.8 CRITICAL nvme: add missing SRCU grace period in error path
CVE-2026-89990 9.8 CRITICAL ceph: lock mutex in ceph_mds_check_access()
CVE-2026-90036 9.8 CRITICAL NFSD: Prevent client use-after-free during blocked-lock reaping
CVE-2026-90038 9.8 CRITICAL NFSD: Prevent client use-after-free during export state revocation
CVE-2026-90037 9.8 CRITICAL NFSD: Prevent client use-after-free during close_lru reaping
CVE-2026-89788 9.8 CRITICAL ksmbd: fix tree connection use-after-free in smb2_tree_connect()
CVE-2026-89783 9.8 CRITICAL xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full
CVE-2026-90042 9.8 CRITICAL ceph: properly decrypt filenames in vmalloc() buffers
CVE-2026-89778 9.8 CRITICAL isofs: fix out-of-bounds page array access on empty zisofs block
CVE-2026-89915 9.3 CRITICAL KVM: arm64: Remove VM-wide VNCR mapping counter
CVE-2026-90049 9.3 CRITICAL net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy()
CVE-2026-89775 9.3 CRITICAL KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation
CVE-2026-89916 9.3 CRITICAL KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry
CVE-2026-89930 9.3 CRITICAL KVM: nVMX: Service local TLB flushes on failed nested VM-Enter

Showing top 20 of 276 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-89936

No comments yet

Leave a comment