CVE-2026-99022

regulator: ltc3676: don't read the write-only HRST and CLIRQ registers

State: Published
Severity: Not scored
Published: Oct 23, 2026
Updated: Oct 30, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

regulator: ltc3676: don't read the write-only HRST and CLIRQ registers

HRST (0x1e) and CLIRQ (0x1f) are write-only command strobes. Writing HRST triggers a hard reset of the chip and writing CLIRQ clears the interrupt; reading them returns nothing useful, and the read itself fires the command.

The result is that a plain register dump resets the board:

cat /sys/kernel/debug/regmap/2-003c/registers

walks every readable register, hits HRST, and the board reboots.

Split the callback back in two so HRST and CLIRQ stay writable but are no longer readable. The readable range is left unchanged (LTC3676_BUCK1 ... LTC3676_IRQSTAT).

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	37b918a034feda1b1ef404acf003812f37ab8da2 to before 4cc1e849bb7dd8deb37f6a51e1aaf725e2016595Affected 37b918a034feda1b1ef404acf003812f37ab8da2 to before 0893de2397d85547d4b88379044aa541b07b56afAffected 37b918a034feda1b1ef404acf003812f37ab8da2 to before f8b0ccdcf3ca7cf6e4c2c400e80f81a727f768c7Affected 37b918a034feda1b1ef404acf003812f37ab8da2 to before fd376d83741118e0212f0da985889c1a98d9c827Affected 37b918a034feda1b1ef404acf003812f37ab8da2 to before 1fb0d58fd363b439b4faf08a16ee6ae38b575cd4Affected 37b918a034feda1b1ef404acf003812f37ab8da2 to before 199a62d70314d21f06a9a6faaa3ef54d0404910cAffected 37b918a034feda1b1ef404acf003812f37ab8da2 to before ca5d85335a8fa6e87b45629f1a07b412482cab17Affected 37b918a034feda1b1ef404acf003812f37ab8da2 to before 28c2388ee24cdbefbcc458fa41ef7bffaaa1cc83Affected
LinuxLinux	4.9Affected before 4.9Not affected 5.10.273 through 5.10.Not affected 5.15.224 through 5.15.Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.113 through 6.12.Not affected 6.18.57 through 6.18.Not affected 7.2.11 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

37b918a034feda1b1ef404acf003812f37ab8da2 to before 4cc1e849bb7dd8deb37f6a51e1aaf725e2016595Affected
37b918a034feda1b1ef404acf003812f37ab8da2 to before 0893de2397d85547d4b88379044aa541b07b56afAffected
37b918a034feda1b1ef404acf003812f37ab8da2 to before f8b0ccdcf3ca7cf6e4c2c400e80f81a727f768c7Affected
37b918a034feda1b1ef404acf003812f37ab8da2 to before fd376d83741118e0212f0da985889c1a98d9c827Affected
37b918a034feda1b1ef404acf003812f37ab8da2 to before 1fb0d58fd363b439b4faf08a16ee6ae38b575cd4Affected
37b918a034feda1b1ef404acf003812f37ab8da2 to before 199a62d70314d21f06a9a6faaa3ef54d0404910cAffected
37b918a034feda1b1ef404acf003812f37ab8da2 to before ca5d85335a8fa6e87b45629f1a07b412482cab17Affected
37b918a034feda1b1ef404acf003812f37ab8da2 to before 28c2388ee24cdbefbcc458fa41ef7bffaaa1cc83Affected

LinuxLinux

4.9Affected
before 4.9Not affected
5.10.273 through 5.10.*Not affected
5.15.224 through 5.15.*Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.113 through 6.12.*Not affected
6.18.57 through 6.18.*Not affected
7.2.11 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.