CVE-2026-93272

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3

The changes introduced to handle single power domain platforms have

swapped the info pointer increment from num_pd_vregs to num_pds, which

would shift the info pointer past the end of the array for pronto-v3,

which does not list power domain regulators in vregs.

This showed up as a difference between GCC- and LLVM-compiled kernels

on SDM632 devices, where only with LLVM one would get the

"regulator request with no identifier" error, because the out-of-bounds

memory ended up being zeroed. Fix by skipping the increment when there

are more power domains than regulators.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References