CVE-2025-38259

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
09/07/2025
Last modified:
10/07/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ASoC: codecs: wcd9335: Fix missing free of regulator supplies<br /> <br /> Driver gets and enables all regulator supplies in probe path<br /> (wcd9335_parse_dt() and wcd9335_power_on_reset()), but does not cleanup<br /> in final error paths and in unbind (missing remove() callback). This<br /> leads to leaked memory and unbalanced regulator enable count during<br /> probe errors or unbind.<br /> <br /> Fix this by converting entire code into devm_regulator_bulk_get_enable()<br /> which also greatly simplifies the code.

Impact