CVE-2025-40296
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
08/12/2025
Last modified:
08/12/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
platform/x86: int3472: Fix double free of GPIO device during unregister<br />
<br />
regulator_unregister() already frees the associated GPIO device. On<br />
ThinkPad X9 (Lunar Lake), this causes a double free issue that leads to<br />
random failures when other drivers (typically Intel THC) attempt to<br />
allocate interrupts. The root cause is that the reference count of the<br />
pinctrl_intel_platform module unexpectedly drops to zero when this<br />
driver defers its probe.<br />
<br />
This behavior can also be reproduced by unloading the module directly.<br />
<br />
Fix the issue by removing the redundant release of the GPIO device<br />
during regulator unregistration.



