CVE-2022-50250

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
15/09/2025
Last modified:
25/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> regulator: core: fix use_count leakage when handling boot-on<br /> <br /> I found a use_count leakage towards supply regulator of rdev with<br /> boot-on option.<br /> <br /> ┌───────────────────┐ ┌───────────────────┐<br /> │ regulator_dev A │ │ regulator_dev B │<br /> │ (boot-on) │ │ (boot-on) │<br /> │ use_count=0 │◀──supply──│ use_count=1 │<br /> │ │ │ │<br /> └───────────────────┘ └───────────────────┘<br /> <br /> In case of rdev(A) configured with `regulator-boot-on&amp;#39;, the use_count<br /> of supplying regulator(B) will increment inside<br /> regulator_enable(rdev-&gt;supply).<br /> <br /> Thus, B will acts like always-on, and further balanced<br /> regulator_enable/disable cannot actually disable it anymore.<br /> <br /> However, B was also configured with `regulator-boot-on&amp;#39;, we wish it<br /> could be disabled afterwards.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.19.270 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.20 (including) 5.4.229 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.5 (including) 5.10.163 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.15.86 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 6.0.16 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.1 (including) 6.1.2 (excluding)