CVE-2025-38668
Description
In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix NULL dereference on unbind due to stale coupling data Failing to reset coupling_desc.n_coupled after freeing coupled_rdevs can lead to NULL pointer dereference when regulators are accessed post-unbind. This can happen during runtime PM or other regulator operations that rely on coupling metadata. For example, on ridesx4, unbinding the 'reg-dummy' platform device triggers a panic in regulator_lock_recursive() due to stale coupling state. Ensure n_coupled is set to 0 to prevent access to invalid pointers.
How to fix
- linux linux_kernel5.4.297, 5.10.241, 5.15.190, 6.1.148, 6.6.101, 6.12.41, 6.15.9 or later
- git.kernel.org/stable/c/233d3c54c9620e95193923859ea1d0b0f5d748ca
- git.kernel.org/stable/c/5d4261dbb3335221fd9c6e69f909ba79ee6663a7
- git.kernel.org/stable/c/6c49eac796681e250e34156bafb643930310bd4a
- git.kernel.org/stable/c/7574892e259bbb16262ebfb4b65a2054a5e03a49
- git.kernel.org/stable/c/800a2cfb2df7f96b3fb48910fc595e0215f6b019
- git.kernel.org/stable/c/ca46946a482238b0cdea459fb82fc837fb36260e
- git.kernel.org/stable/c/ca9bef9ba1a6be640c87bf802d2e9e696021576a
- git.kernel.org/stable/c/d7e59c5fd7a0f5e16e75a30a89ea2c4ab88612b8
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 5.3 ≤ v < 5.4.297, 5.5 ≤ v < 5.10.241, 5.11 ≤ v < 5.15.190, 5.16 ≤ v < 6.1.148, 6.2 ≤ v < 6.6.101, 6.7 ≤ v < 6.12.41, 6.13 ≤ v < 6.15.9, 6.16 | 5.4.297, 5.10.241, 5.15.190, 6.1.148, 6.6.101, 6.12.41, 6.15.9 |
| debian debian_linux | 11.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.