CVE-2026-99022

Source
https://cve.org/CVERecord?id=CVE-2026-99022
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-99022.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-99022
Downstream
Related
Published
2026-10-23T12:21:03Z
Modified
2026-11-04T14:27:19Z
Summary
regulator: ltc3676: don't read the write-only HRST and CLIRQ registers
Details

In the Linux kernel, the following vulnerability has been resolved:

regulator: ltc3676: don't read the write-only HRST and CLIRQ registers

HRST (0x1e) and CLIRQ (0x1f) are write-only command strobes. Writing HRST triggers a hard reset of the chip and writing CLIRQ clears the interrupt; reading them returns nothing useful, and the read itself fires the command.

The result is that a plain register dump resets the board:

cat /sys/kernel/debug/regmap/2-003c/registers

walks every readable register, hits HRST, and the board reboots.

Split the callback back in two so HRST and CLIRQ stay writable but are no longer readable. The readable range is left unchanged (LTC3676_BUCK1 ... LTC3676_IRQSTAT).

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/99xxx/CVE-2026-99022.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
37b918a034feda1b1ef404acf003812f37ab8da2
Fixed
4cc1e849bb7dd8deb37f6a51e1aaf725e2016595
Fixed
0893de2397d85547d4b88379044aa541b07b56af
Fixed
f8b0ccdcf3ca7cf6e4c2c400e80f81a727f768c7
Fixed
fd376d83741118e0212f0da985889c1a98d9c827
Fixed
1fb0d58fd363b439b4faf08a16ee6ae38b575cd4
Fixed
199a62d70314d21f06a9a6faaa3ef54d0404910c
Fixed
ca5d85335a8fa6e87b45629f1a07b412482cab17
Fixed
28c2388ee24cdbefbcc458fa41ef7bffaaa1cc83

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-99022.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.9.0
Fixed
5.10.273
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.224
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.113
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.57
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.11

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-99022.json"