CVE-2026-93272

remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3

State: Published
Severity: Not scored
Published: Sep 24, 2026
Updated: Oct 30, 2026
Reserved: Sep 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3

The changes introduced to handle single power domain platforms have swapped the info pointer increment from num_pd_vregs to num_pds, which would shift the info pointer past the end of the array for pronto-v3, which does not list power domain regulators in vregs.

This showed up as a difference between GCC- and LLVM-compiled kernels on SDM632 devices, where only with LLVM one would get the "regulator request with no identifier" error, because the out-of-bounds memory ended up being zeroed. Fix by skipping the increment when there are more power domains than regulators.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8d0d4c11cace475f1b07f98ee3d2bd334590e17b to before d5deaa0b6d91b1063055415fc53f75c40c2a077dAffected fef1e1487dea81c2b4560e393ba4b0be57e28d01 to before 7abab59d6c99ba2b8101d6f44ad25159b1510724Affected 69bb5b3ae348040e385113efba5bdc76396644d0 to before e572cbb513cde53d90fb4729cad75056cd647ce3Affected 65991ea8a6d1e68effdc01d95ebe39f1653f7b71 to before 2e7e39bb81913feaac463b7add46bafdca06fbdeAffected 65991ea8a6d1e68effdc01d95ebe39f1653f7b71 to before bce6b48af3abf7468d12ef4933f21bd8c1d822e9Affected 65991ea8a6d1e68effdc01d95ebe39f1653f7b71 to before 3dbc90b9c22ea96e37bf55f6011e63b5123ec668Affected 654c295f9079d2c7875172142022168e34c4e34eAffected 04a89c98810d2dba8187120c07fdb732aa40ca14Affected 6.1.141 to before 6.1.191Affected 6.6.93 to before 6.6.160Affected 6.12.31 to before 6.12.114Affected 5.15.185 to before 5.16Affected 6.14.9 to before 6.15Affected
LinuxLinux	6.15Affected before 6.15Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.114 through 6.12.Not affected 6.18.57 through 6.18.Not affected 7.2.6 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

8d0d4c11cace475f1b07f98ee3d2bd334590e17b to before d5deaa0b6d91b1063055415fc53f75c40c2a077dAffected
fef1e1487dea81c2b4560e393ba4b0be57e28d01 to before 7abab59d6c99ba2b8101d6f44ad25159b1510724Affected
69bb5b3ae348040e385113efba5bdc76396644d0 to before e572cbb513cde53d90fb4729cad75056cd647ce3Affected
65991ea8a6d1e68effdc01d95ebe39f1653f7b71 to before 2e7e39bb81913feaac463b7add46bafdca06fbdeAffected
65991ea8a6d1e68effdc01d95ebe39f1653f7b71 to before bce6b48af3abf7468d12ef4933f21bd8c1d822e9Affected
65991ea8a6d1e68effdc01d95ebe39f1653f7b71 to before 3dbc90b9c22ea96e37bf55f6011e63b5123ec668Affected
654c295f9079d2c7875172142022168e34c4e34eAffected
04a89c98810d2dba8187120c07fdb732aa40ca14Affected
6.1.141 to before 6.1.191Affected
6.6.93 to before 6.6.160Affected
6.12.31 to before 6.12.114Affected
5.15.185 to before 5.16Affected
6.14.9 to before 6.15Affected

LinuxLinux

6.15Affected
before 6.15Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.114 through 6.12.*Not affected
6.18.57 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.