CVE-2022-50582

regulator: core: Prevent integer underflow

N/A
Published: October 22, 2025 at 01:23 PM UTC
Updated: June 17, 2026 at 05:23 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: regulator: core: Prevent integer underflow By using a ratio of delay to poll_enabled_time that is not integer time_remaining underflows and does not exit the loop as expected. As delay could be derived from DT and poll_enabled_time is defined in the driver this can easily happen. Use a signed iterator to make sure that the loop exits once the remaining time is negative.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.9 ≤ v < 5.10.1505.9 ≤ v < 5.15.755.9 ≤ v < 5.19.175.9 ≤ v < 6.0.35.9 ≤ v < 6.15.9f7d7ad42a9dc2d63cab6a79fe31e6732a30dacf5
Vendor states this is fixed in 8d8e16592022c9650df8aedfe6552ed478d7135b (fixed)
Vendor states this is fixed in 9f2395316e4845466cb9b5b9b15a171a2c91913c (fixed)
Vendor states this is fixed in b051d9bf98bd9cea312b228e264eb6542a9beb67 (fixed)
Vendor states this is fixed in bfe602d9a349360e60e9051c9cafb9fef204524d (fixed)
Vendor states this is fixed in e33da263e9658bfe870ea7836fbbd72f246d7dbd (fixed)
Vendor states this is fixed in 5.10.150 (unaffected)
Vendor states this is fixed in 5.15.75 (unaffected)
Vendor states this is fixed in 5.19.17 (unaffected)
Vendor states this is fixed in 5.9 (unaffected)
Vendor states this is fixed in 6.0.3 (unaffected)
Vendor states this is fixed in 6.1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card