CVE-2026-45875

Description

In the Linux kernel, the following vulnerability has been resolved: mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure The wm5102_clear_write_sequencer() helper may return an error and just return, bypassing the cleanup sequence and causing regulators to remain enabled, leading to a resource leak. Change the direct return to jump to the err_reset label to properly free the resources.

Overview

State: PUBLISHED
Assigner (CNA): Linux
CVSS severity: high
CVSS score: 8.4 / 10
CVSS vector: AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Effective score: 8.4 / 10 HIGH source: CNA overview
CWE(s): —
Reserved: 2026-05-13
Published: 2026-05-27 12:15 UTC
Last updated: 2026-05-27 12:15 UTC
Source: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45875.json
Linked Threat: CVE-2026-45875 — CVE-2026-45875

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published: 2026-05-27 14:17:01 UTC
NVD last modified: 2026-06-25 21:05:32 UTC
NVD CVSS v3.1: 5.5 / 10 MEDIUM source: nvd@nist.gov
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability subscore: 1.8 / 10
Impact subscore: 3.6 / 10
EPSS score: 0.0017 (probability of exploitation in next 30 days)
EPSS percentile: 6.16% vs all CVEs — higher = more likely to be exploited, as of 2026-07-26

NVD-assigned CWE(s): CWE-401 (differs from the CNA list above)

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID: EUVD-2026-32341
Assigner: Linux
Published: May 27, 2026, 12:15:56 PM
Updated: May 27, 2026, 12:15:56 PM
EUVD base score: 0.0 / 10
EUVD-reported EPSS: 0.1700
Vendors: Linux
Products: Linux (patch: 5.15.202)

Linux (1c1c6bba57f51331f64f32d0ce9a0f9883041205 <54eafc1b0dbcf79c5f8b6dc8d9e92e56b9384c0a)

Linux (1c1c6bba57f51331f64f32d0ce9a0f9883041205 <5a4923726a165593d7601834a6fb2a10ab47b85d)

Linux (patch: 5.10.252)

Linux (1c1c6bba57f51331f64f32d0ce9a0f9883041205 <3ea01691738b0decb63ea2705d2cdf27f6f26fc0)

Linux (patch: 6.6.128)

Linux (patch: 6.1.165)

Linux (patch: 6.18.14)

Linux (patch: 7.0)

Linux (patch: 0)

Linux (1c1c6bba57f51331f64f32d0ce9a0f9883041205 <445cec7b4fbb1546836ae8e332d158e8d37d0fb6)

Linux (patch: 6.19.4)

Linux (1c1c6bba57f51331f64f32d0ce9a0f9883041205 <933c5463873582baaecf5c38401ec4095b1c6269)

Linux (patch: 6.12.75)

Linux (4.2)

Linux (1c1c6bba57f51331f64f32d0ce9a0f9883041205 <4feb753ba6e5e5bbaba868b841a2db41c21e56fa)

Linux (1c1c6bba57f51331f64f32d0ce9a0f9883041205 <2049820d1e635e467d795237fd40287213d92349)

Linux (1c1c6bba57f51331f64f32d0ce9a0f9883041205 <e0527c09bcf1e6beeb685a7f4177683866b8609c)
Aliases: GHSA-jvj6-qwx6-7f2x

ENISA description: In the Linux kernel, the following vulnerability has been resolved: mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure The wm5102_clear_write_sequencer() helper may return an error and just return, bypassing the cleanup sequence and causing regulators to remain enabled, leading to a resource leak. Change the direct return to jump to the err_reset label to properly free the resources.

EUVD references (8)

Affected products (2)

Vendor	Product	Versions	Platforms
Linux	Linux	`1c1c6bba57f51331f64f32d0ce9a0f9883041205` (affected), `1c1c6bba57f51331f64f32d0ce9a0f9883041205` (affected), `1c1c6bba57f51331f64f32d0ce9a0f9883041205` (affected), `1c1c6bba57f51331f64f32d0ce9a0f9883041205` (affected), `1c1c6bba57f51331f64f32d0ce9a0f9883041205` (affected), `1c1c6bba57f51331f64f32d0ce9a0f9883041205` (affected), `1c1c6bba57f51331f64f32d0ce9a0f9883041205` (affected), `1c1c6bba57f51331f64f32d0ce9a0f9883041205` (affected)	—
Linux	Linux	`4.2` (affected), `0` (unaffected), `5.10.252` (unaffected), `5.15.202` (unaffected), `6.1.165` (unaffected), `6.6.128` (unaffected), `6.12.75` (unaffected), `6.18.14` (unaffected), `6.19.4` (unaffected), `7.0` (unaffected)	—

Affected products — CPE 2.3 (1) NVD

NVD's normalized CPE 2.3 matchers, used by vendor tools (vulnerability scanners, asset managers) for automated detection. Compare with the CNA's free-text "Affected products" section above.

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Vendor references (8)

References embedded in the original CVE record by the assigning CNA.

Web references (11)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

https://git.kernel.org/stable/c/2049820d1e635e467d795237fd40287213d92349 tenable:git.kernel.org
https://git.kernel.org/stable/c/3ea01691738b0decb63ea2705d2cdf27f6f26fc0 tenable:git.kernel.org
https://git.kernel.org/stable/c/445cec7b4fbb1546836ae8e332d158e8d37d0fb6 tenable:git.kernel.org
https://git.kernel.org/stable/c/4feb753ba6e5e5bbaba868b841a2db41c21e56fa tenable:git.kernel.org
https://git.kernel.org/stable/c/54eafc1b0dbcf79c5f8b6dc8d9e92e56b9384c0a tenable:git.kernel.org
https://git.kernel.org/stable/c/5a4923726a165593d7601834a6fb2a10ab47b85d tenable:git.kernel.org
https://git.kernel.org/stable/c/933c5463873582baaecf5c38401ec4095b1c6269 tenable:git.kernel.org
https://git.kernel.org/stable/c/e0527c09bcf1e6beeb685a7f4177683866b8609c tenable:git.kernel.org
https://nvd.nist.gov/vuln/detail/CVE-2026-45875 tenable:nvd.nist.gov
https://www.cve.org/CVERecord?id=CVE-2026-45875 tenable:www.cve.org
https://www.first.org/epss/ tenable:www.first.org

NVD-tagged references (8)

Reference list NVD curates from the CNA record, vendor advisories, and third-party reports. The tag chips below are NVD's analyst-assigned categories.

https://git.kernel.org/stable/c/2049820d1e635e467d795237fd40287213d92349 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/3ea01691738b0decb63ea2705d2cdf27f6f26fc0 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/445cec7b4fbb1546836ae8e332d158e8d37d0fb6 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/4feb753ba6e5e5bbaba868b841a2db41c21e56fa 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/54eafc1b0dbcf79c5f8b6dc8d9e92e56b9384c0a 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/5a4923726a165593d7601834a6fb2a10ab47b85d 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/933c5463873582baaecf5c38401ec4095b1c6269 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/e0527c09bcf1e6beeb685a7f4177683866b8609c 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch

Remediations (15)

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

Microsoft Releases Mitigation for Windows BitLocker Security Bypass 0 ...

web:cybersecuritynews.com

No patch has been released yet; Microsoft has instead issued a multi-step manual mitigation guide while a formal security update is prepared. Windows BitLocker Security Bypass The vulnerability originates in WinRE's handling of the BootExecute registry value under HKLM\ControlSet001\Control\Session Manager.

2026-06-04 00:16 UTC
Security Update Guide - Microsoft Security Response Center

web:msrc.microsoft.com

Security Update Guide - Microsoft Security Response Center

2026-06-04 00:16 UTC
NVD - Home

web:nvd.nist.gov

The NVD is the U.S. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables automation of vulnerability management, security measurement, and compliance. The NVD includes databases of security checklist references, security-related software flaws, product names, and impact metrics. For ...

2026-06-04 00:16 UTC
Security Update Guide - Microsoft

web:portal.msrc.microsoft.com

The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

2026-06-04 00:16 UTC
How To Mitigate The Microsoft Windows BitLocker YellowKey USB 0-Day

web:www.forbes.com

Following the release of a BitLocker zero-day security bypass by a disgruntled hacker, Microsoft has now offered mitigation advice until a patch is available.

2026-06-04 00:16 UTC
Microsoft provides mitigation for "YellowKey" BitLocker bypass flaw ...

web:www.helpnetsecurity.com

Microsoft is working on a fix for CVE - 2026 -45585 (aka "Yellowkey"), a vulnerability that can be used to bypass Windows' BitLocker protection.

2026-06-04 00:16 UTC
From WinRE to SYSTEM: Hunting CVE-2026-45585 Exploitation and the ...

web:www.levelblue.com

At the time of writing, no patch is available, and no CVE has been assigned. Microsoft has since assigned CVE - 2026 -45585 to this issue and released official mitigation guidance, with a security update pending. The vulnerability is classified as a BitLocker Security Feature Bypass requiring physical access.

2026-06-04 00:16 UTC
YellowKey fully bypasses Microsoft BitLocker encryption on affected ...

web:www.notebookcheck.net

Nightmare-Eclipse has released YellowKey, a fully BitLocker encrypted disk bypass for vulnerable Windows 11 and Server systems. The hack leverages code left behind in the WinRE recovery ...

2026-06-04 00:16 UTC
Microsoft Rolls Out Mitigations for 'YellowKey' BitLocker Bypass

web:www.securityweek.com

Microsoft has announced mitigations for CVE - 2026 -45585, a BitLocker bypass triggered via FsTx in Windows Recovery.

2026-06-04 00:16 UTC
Patch Tuesday June 2026: Security Updates & CVE Analysis

web:zecurit.com

Get the complete breakdown of Microsoft's June 2026 Patch Tuesday. We analyze the latest security updates and all critical CVEs .

2026-06-04 00:16 UTC
CVE-2026-45585: Windows Zero-Day Bypasses BitLocker

web:dailysecurityreview.com

Microsoft disclosed CVE - 2026 -45585, a Windows zero-day that allows attackers with physical access to bypass BitLocker encryption without the decryption key.

2026-06-19 02:27 UTC
Updated Mitigation Script for CVE-2026-45585 (BitLocker)

web:its.wsu.edu

Microsoft has updated the mitigation guidance for CVE - 2026 -45585, a vulnerability involving Windows BitLocker security feature bypass. The update replaces the previously documented manual mitigation steps with a deployment script that reduces exposure while a future security update is in development. The vulnerability impacts a limited set of platforms: Windows 11 versions 26H1, 25H2, and 24H2 ...

2026-06-19 02:27 UTC
Nvd - Cve-2026-49875

web:nvd.nist.gov

An official website of the United States government Here's how you know

2026-06-19 02:27 UTC
Microsoft shares mitigation for YellowKey Windows zero-day

web:www.bleepingcomputer.com

Microsoft has shared mitigations for YellowKey, a recently disclosed Windows BitLocker zero-day vulnerability that grants access to protected drives.

2026-06-19 02:27 UTC
Microsoft is working on a patch for 'YellowKey ... - Computerworld

web:www.computerworld.com

Microsoft says it is considering a patch for a zero-day vulnerability, dubbed YellowKey, that allows attackers with access to a Windows device to bypass Bitlocker encryption protection and read ...

2026-06-19 02:27 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2026-45875.json.

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/mfd/arizona-core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "54eafc1b0dbcf79c5f8b6dc8d9e92e56b9384c0a",
              "status": "affected",
              "version": "1c1c6bba57f51331f64f32d0ce9a0f9883041205",
              "versionType": "git"
            },
            {
              "lessThan": "933c5463873582baaecf5c38401ec4095b1c6269",
              "status": "affected",
              "version": "1c1c6bba57f51331f64f32d0ce9a0f9883041205",
              "versionType": "git"
            },
            {
              "lessThan": "445cec7b4fbb1546836ae8e332d158e8d37d0fb6",
              "status": "affected",
              "version": "1c1c6bba57f51331f64f32d0ce9a0f9883041205",
              "versionType": "git"
            },
            {
              "lessThan": "3ea01691738b0decb63ea2705d2cdf27f6f26fc0",
              "status": "affected",
              "version": "1c1c6bba57f51331f64f32d0ce9a0f9883041205",
              "versionType": "git"
            },
            {
              "lessThan": "e0527c09bcf1e6beeb685a7f4177683866b8609c",
              "status": "affected",
              "version": "1c1c6bba57f51331f64f32d0ce9a0f9883041205",
              "versionType": "git"
            },
            {
              "lessThan": "5a4923726a165593d7601834a6fb2a10ab47b85d",
              "status": "affected",
              "version": "1c1c6bba57f51331f64f32d0ce9a0f9883041205",
              "versionType": "git"
            },
            {
              "lessThan": "2049820d1e635e467d795237fd40287213d92349",
              "status": "affected",
              "version": "1c1c6bba57f51331f64f32d0ce9a0f9883041205",
              "versionType": "git"
            },
            {
              "lessThan": "4feb753ba6e5e5bbaba868b841a2db41c21e56fa",
              "status": "affected",
              "version": "1c1c6bba57f51331f64f32d0ce9a0f9883041205",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/mfd/arizona-core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.2"
            },
            {
              "lessThan": "4.2",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.252",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.202",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.165",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.128",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.75",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.14",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.252",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.202",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.165",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.128",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.75",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.14",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.4",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure\n\nThe wm5102_clear_write_sequencer() helper may return an error\nand just return, bypassing the cleanup sequence and causing\nregulators to remain enabled, leading to a resource leak.\n\nChange the direct return to jump to the err_reset label to\nproperly free the resources."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-27T12:15:56.675Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/54eafc1b0dbcf79c5f8b6dc8d9e92e56b9384c0a"
        },
        {
          "url": "https://git.kernel.org/stable/c/933c5463873582baaecf5c38401ec4095b1c6269"
        },
        {
          "url": "https://git.kernel.org/stable/c/445cec7b4fbb1546836ae8e332d158e8d37d0fb6"
        },
        {
          "url": "https://git.kernel.org/stable/c/3ea01691738b0decb63ea2705d2cdf27f6f26fc0"
        },
        {
          "url": "https://git.kernel.org/stable/c/e0527c09bcf1e6beeb685a7f4177683866b8609c"
        },
        {
          "url": "https://git.kernel.org/stable/c/5a4923726a165593d7601834a6fb2a10ab47b85d"
        },
        {
          "url": "https://git.kernel.org/stable/c/2049820d1e635e467d795237fd40287213d92349"
        },
        {
          "url": "https://git.kernel.org/stable/c/4feb753ba6e5e5bbaba868b841a2db41c21e56fa"
        }
      ],
      "title": "mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-45875",
    "datePublished": "2026-05-27T12:15:56.675Z",
    "dateReserved": "2026-05-13T15:03:33.081Z",
    "dateUpdated": "2026-05-27T12:15:56.675Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}