Description
In the Linux kernel, the following vulnerability has been resolved:

mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure

The wm5102_clear_write_sequencer() helper may return an error
and just return, bypassing the cleanup sequence and causing
regulators to remain enabled, leading to a resource leak.

Change the direct return to jump to the err_reset label to
properly free the resources.
Published: 2026-05-27
Score: n/a
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The wm5102_clear_write_sequencer() helper may return an error and exit early, skipping the cleanup sequence that normally disables hardware regulators. As a result, those regulators remain enabled, creating a resource leak. The flaw is a functional defect that does not provide a direct code execution path or privilege escalation.

Affected Systems

Any Linux kernel build that includes the mfd: Arizona driver for the WM5102 chip is affected. This includes systems where the kernel is compiled with this driver and where WM5102 hardware is present. No specific kernel version range is supplied, so the issue may exist in any build until the patch is applied.

Risk and Exploitability

The vulnerability has a very low likelihood of exploitation, reflected by an EPSS score of <1% and no listing in the CISA KEV catalog. Exploitation would likely require local access to trigger the error path of wm5102_clear_write_sequencer() on a system with WM5102 hardware, and it does not provide a remote attack vector or direct escalation. The impact is limited to a resource leak that could affect power management but does not compromise confidentiality, integrity, or availability.

Generated by OpenCVE AI on May 28, 2026 at 17:38 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the Linux kernel to a build that includes the commit 2049820d1e635e467d795237fd40287213d92349 to fix the cleanup logic.
  • After the kernel update, reboot the system or reload the mfd: Arizona module so the corrected driver code is active.
  • Verify that regulators are properly disabled after operation by checking relevant sysfs entries or kernel logs to confirm the cleanup is functioning.
  • If an immediate kernel update is not feasible, consider disabling the WM5102-related regulators or limiting their usage to mitigate the risk until the patch can be applied.

Generated by OpenCVE AI on May 28, 2026 at 17:38 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4606-1 linux security update
History

Thu, 28 May 2026 15:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-399
CWE-778

Thu, 28 May 2026 12:15:00 +0000


Wed, 27 May 2026 18:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-399
CWE-778

Wed, 27 May 2026 14:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure The wm5102_clear_write_sequencer() helper may return an error and just return, bypassing the cleanup sequence and causing regulators to remain enabled, leading to a resource leak. Change the direct return to jump to the err_reset label to properly free the resources.
Title mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-05-27T12:15:56.675Z

Reserved: 2026-05-13T15:03:33.081Z

Link: CVE-2026-45875

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-05-27T14:17:01.117

Modified: 2026-05-27T14:48:31.480

Link: CVE-2026-45875

cve-icon Redhat

Severity :

Publid Date: 2026-05-27T00:00:00Z

Links: CVE-2026-45875 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-05-28T17:45:22Z

Weaknesses
  • CWE-772

    Missing Release of Resource after Effective Lifetime