CVE-2025-38259
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
09/07/2025
Last modified:
10/07/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ASoC: codecs: wcd9335: Fix missing free of regulator supplies<br />
<br />
Driver gets and enables all regulator supplies in probe path<br />
(wcd9335_parse_dt() and wcd9335_power_on_reset()), but does not cleanup<br />
in final error paths and in unbind (missing remove() callback). This<br />
leads to leaked memory and unbalanced regulator enable count during<br />
probe errors or unbind.<br />
<br />
Fix this by converting entire code into devm_regulator_bulk_get_enable()<br />
which also greatly simplifies the code.
Impact
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/9079db287fc3e38e040b0edeb0a25770bb679c8e
- https://git.kernel.org/stable/c/9830ef1803a5bc50b4a984a06cf23142cd46229d
- https://git.kernel.org/stable/c/a8795f3cd289cd958f6396a1b43ba46fa8e22a2e
- https://git.kernel.org/stable/c/b86280aaa23c1c0f31bcaa600d35ddc45bc38b7a
- https://git.kernel.org/stable/c/edadaf4239c14dc8a19ea7f60b97d5524d93c29b