CVE-2025-38535

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-38535
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38535.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-38535
Downstream
Related
Published
2025-08-16T11:12:27.873Z
Modified
2025-11-28T02:35:16.034194Z
Summary
phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode
Details

In the Linux kernel, the following vulnerability has been resolved:

phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode

When transitioning from USBROLEDEVICE to USBROLENONE, the code assumed that the regulator should be disabled. However, if the regulator is marked as always-on, regulatorisenabled() continues to return true, leading to an incorrect attempt to disable a regulator which is not enabled.

This can result in warnings such as:

[ 250.155624] WARNING: CPU: 1 PID: 7326 at drivers/regulator/core.c:3004 regulatordisable+0xe4/0x1a0 [ 250.155652] unbalanced disables for VINSYS5V0

To fix this, we move the regulator control logic into tegra186xusbpadctlidoverride() function since it's directly related to the ID override state. The regulator is now only disabled when the role transitions from USBROLEHOST to USBROLENONE, by checking the VBUS_ID register. This ensures that regulator enable/disable operations are properly balanced and only occur when actually transitioning to/from host mode.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38535.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
49d46e3c7e597e8b00c6fc16e6fd7a92044f4371
Fixed
ceb645ac6ce052609ee5c8f819a80e8881789b04
Fixed
cdcb0ffd6448f6be898956913a42bd08e59fb2ae
Fixed
1bb85b5c2bd43b687c3d54eb6328917f90dd38fc
Fixed
5367cdeb75cb6c687ca468450bceb2602ab239d8
Fixed
ec7f98ff05f0649af0adeb4808c7ba23d6111ef9
Fixed
eaa420339658615d26c1cc95cd6cf720b9aebfca
Fixed
cefc1caee9dd06c69e2d807edc5949b329f52b22

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.7.0
Fixed
5.10.241
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.190
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.147
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.100
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.40
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.15.8