CVE-2026-72395

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the hardware monitoring (hwmon) PMBus core where regulator events are batched using atomic or(). The delayed worker passes the combined bitmask directly to the regulator notifier call chain() function. Because the regulator handle critical() function uses a strict switch statement to evaluate the event parameter, a combined bitmask resulting from multiple simultaneous faults (such as REGULATOR EVENT UNDER VOLTAGE and REGULATOR EVENT OVER CURRENT) will not match any defined case. This results in the reason being set to NULL and causes the system to bypass the critical hw protection trigger() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.