CVE-2026-31486: hwmon: (pmbus/core) Protect regulator operations with mutex
Published Apr 22, 2026
·Updated
hwmon: (pmbus/core) Protect regulator operations with mutex
Other sources
In the Linux kernel, the following vulnerability has been resolved:
— Launchpad
Affected Software
13 affected componentsFixes available
Linux Linux kernel
Linux Linux kernel>=3.19.1<6.18.21
Linux Linux kernel>=6.19<6.19.11
Linux Linux kernel=3.19
Linux Linux kernel=7.0-rc1
Linux Linux kernel=7.0-rc2
Linux Linux kernel=7.0-rc3
Linux Linux kernel=7.0-rc4
Linux Linux kernel=7.0-rc5
Linux Linux kernel=7.0-rc6
Linux Linux kernel=7.0-rc7
debian/linux<=6.1.176-1, <=6.1.187-1
6.12.107-17.2.6-17.2.7-1
Microsoft azl3 kernel 6.6.143.1-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.107-1Fixed in 7.2.6-1Fixed in 7.2.7-1
Event History
Apr 22, 2026
CVE Published
via MITRE·01:54 PM
Data Sourced
via MITRE·01:54 PM
DescriptionSeverity
Data Sourced
via NVD·02:16 PM
RemedyDescriptionSeverityWeaknessAffected Software
Apr 23, 2026
Data Sourced
via Microsoft·08:04 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·08:04 AM
Affected Software
Updated
via Microsoft·08:04 AM
DescriptionSeverity
Sep 21, 2026
Data Sourced
via Launchpad·02:53 PM
Description
Sep 23, 2026
Data Sourced
via Ubuntu·02:53 PM
RemedyDescriptionSeverityAffected Software
Sep 24, 2026
Data Sourced
via Debian·02:56 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-31486?
CVE-2026-31486 has a severity rating of high, specifically rated at 7.1.
2
How do I fix CVE-2026-31486?
To fix CVE-2026-31486, you should apply the available patch from the Linux kernel.
3
What type of vulnerability is CVE-2026-31486?
CVE-2026-31486 is classified as a race condition vulnerability.
4
Which software is affected by CVE-2026-31486?
CVE-2026-31486 affects the Linux kernel, specifically the hwmon subsystem.
5
What are the implications of CVE-2026-31486?
CVE-2026-31486 could allow an attacker to exploit the affected regulator operations, potentially leading to privilege escalation.