In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix usecount leakage when handling boot-on I found a usecount leakage towards supply regulator of rdev with boot-on option. ┌───────────────────┐ ┌───────────────────┐ │ regulatordev A │ │ regulatordev B │ │ (boot-on) │ │ (boot-on) │ │ usecount=0 │◀──supply──│ usecount=1 │ │ │ │ │ └───────────────────┘ └───────────────────┘ In case of rdev(A) configured with regulator-boot-on', the use_count of supplying regulator(B) will increment inside regulator_enable(rdev->supply). Thus, B will acts like always-on, and further balanced regulator_enable/disable cannot actually disable it anymore. However, B was also configured with
regulator-boot-on', we wish it could be disabled afterwards.