logo_clicknbuy.png

CVE-2025-38668 – Linux Kernel Regulator NULL Pointer Dereference Vulnerability

The following table lists the changes that have been made to the
CVE-2025-38668 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Aug. 22, 2025

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved:

    regulator: core: fix NULL dereference on unbind due to stale coupling data

    Failing to reset coupling_desc.n_coupled after freeing coupled_rdevs can
    lead to NULL pointer dereference when regulators are accessed post-unbind.

    This can happen during runtime PM or other regulator operations that rely
    on coupling metadata.

    For example, on ridesx4, unbinding the ‘reg-dummy’ platform device triggers
    a panic in regulator_lock_recursive() due to stale coupling state.

    Ensure n_coupled is set to 0 to prevent access to invalid pointers.
    Added Reference https://git.kernel.org/stable/c/233d3c54c9620e95193923859ea1d0b0f5d748ca
    Added Reference https://git.kernel.org/stable/c/5d4261dbb3335221fd9c6e69f909ba79ee6663a7
    Added Reference https://git.kernel.org/stable/c/800a2cfb2df7f96b3fb48910fc595e0215f6b019
    Added Reference https://git.kernel.org/stable/c/ca46946a482238b0cdea459fb82fc837fb36260e
    Added Reference https://git.kernel.org/stable/c/d7e59c5fd7a0f5e16e75a30a89ea2c4ab88612b8
Share the Post:

Related Posts