In the Linux kernel, the following vulnerability has been resolved:
regulator: core: fix NULL dereference on unbind due to stale coupling data
Failing to reset couplingdesc.ncoupled after freeing coupled_rdevs can lead to NULL pointer dereference when regulators are accessed post-unbind.
This can happen during runtime PM or other regulator operations that rely on coupling metadata.
For example, on ridesx4, unbinding the 'reg-dummy' platform device triggers a panic in regulatorlockrecursive() due to stale coupling state.
Ensure n_coupled is set to 0 to prevent access to invalid pointers.
[
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"31155393458918474692414483796049467115",
"204462867749586892274229186749122802587",
"135274942774477081838872292373628120658"
]
},
"id": "CVE-2025-38668-04b257f6",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca9bef9ba1a6be640c87bf802d2e9e696021576a",
"signature_version": "v1",
"target": {
"file": "drivers/regulator/core.c"
},
"deprecated": false
},
{
"digest": {
"function_hash": "176076357460144966431105557976972061122",
"length": 927.0
},
"id": "CVE-2025-38668-1af10b15",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7574892e259bbb16262ebfb4b65a2054a5e03a49",
"signature_version": "v1",
"target": {
"file": "drivers/regulator/core.c",
"function": "regulator_remove_coupling"
},
"deprecated": false
},
{
"digest": {
"function_hash": "294505832959268315033934477709041289169",
"length": 941.0
},
"id": "CVE-2025-38668-1b4b4ba2",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@800a2cfb2df7f96b3fb48910fc595e0215f6b019",
"signature_version": "v1",
"target": {
"file": "drivers/regulator/core.c",
"function": "regulator_remove_coupling"
},
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"31155393458918474692414483796049467115",
"204462867749586892274229186749122802587",
"135274942774477081838872292373628120658"
]
},
"id": "CVE-2025-38668-239c6b1b",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5d4261dbb3335221fd9c6e69f909ba79ee6663a7",
"signature_version": "v1",
"target": {
"file": "drivers/regulator/core.c"
},
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"31155393458918474692414483796049467115",
"204462867749586892274229186749122802587",
"135274942774477081838872292373628120658"
]
},
"id": "CVE-2025-38668-2c617a9e",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6c49eac796681e250e34156bafb643930310bd4a",
"signature_version": "v1",
"target": {
"file": "drivers/regulator/core.c"
},
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"31155393458918474692414483796049467115",
"204462867749586892274229186749122802587",
"135274942774477081838872292373628120658"
]
},
"id": "CVE-2025-38668-37b326a3",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@800a2cfb2df7f96b3fb48910fc595e0215f6b019",
"signature_version": "v1",
"target": {
"file": "drivers/regulator/core.c"
},
"deprecated": false
},
{
"digest": {
"function_hash": "294505832959268315033934477709041289169",
"length": 941.0
},
"id": "CVE-2025-38668-3ff31b3c",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@233d3c54c9620e95193923859ea1d0b0f5d748ca",
"signature_version": "v1",
"target": {
"file": "drivers/regulator/core.c",
"function": "regulator_remove_coupling"
},
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"32288432546446399061007815189048981851",
"321785961285733098544509781824606041674",
"135274942774477081838872292373628120658"
]
},
"id": "CVE-2025-38668-71531335",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7574892e259bbb16262ebfb4b65a2054a5e03a49",
"signature_version": "v1",
"target": {
"file": "drivers/regulator/core.c"
},
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"31155393458918474692414483796049467115",
"204462867749586892274229186749122802587",
"135274942774477081838872292373628120658"
]
},
"id": "CVE-2025-38668-837262b4",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d7e59c5fd7a0f5e16e75a30a89ea2c4ab88612b8",
"signature_version": "v1",
"target": {
"file": "drivers/regulator/core.c"
},
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"31155393458918474692414483796049467115",
"204462867749586892274229186749122802587",
"135274942774477081838872292373628120658"
]
},
"id": "CVE-2025-38668-af04d530",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca46946a482238b0cdea459fb82fc837fb36260e",
"signature_version": "v1",
"target": {
"file": "drivers/regulator/core.c"
},
"deprecated": false
},
{
"digest": {
"function_hash": "294505832959268315033934477709041289169",
"length": 941.0
},
"id": "CVE-2025-38668-afbad8da",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d7e59c5fd7a0f5e16e75a30a89ea2c4ab88612b8",
"signature_version": "v1",
"target": {
"file": "drivers/regulator/core.c",
"function": "regulator_remove_coupling"
},
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"31155393458918474692414483796049467115",
"204462867749586892274229186749122802587",
"135274942774477081838872292373628120658"
]
},
"id": "CVE-2025-38668-bc119862",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@233d3c54c9620e95193923859ea1d0b0f5d748ca",
"signature_version": "v1",
"target": {
"file": "drivers/regulator/core.c"
},
"deprecated": false
},
{
"digest": {
"function_hash": "294505832959268315033934477709041289169",
"length": 941.0
},
"id": "CVE-2025-38668-d11d7d7a",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca46946a482238b0cdea459fb82fc837fb36260e",
"signature_version": "v1",
"target": {
"file": "drivers/regulator/core.c",
"function": "regulator_remove_coupling"
},
"deprecated": false
},
{
"digest": {
"function_hash": "294505832959268315033934477709041289169",
"length": 941.0
},
"id": "CVE-2025-38668-d5a26b84",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6c49eac796681e250e34156bafb643930310bd4a",
"signature_version": "v1",
"target": {
"file": "drivers/regulator/core.c",
"function": "regulator_remove_coupling"
},
"deprecated": false
},
{
"digest": {
"function_hash": "294505832959268315033934477709041289169",
"length": 941.0
},
"id": "CVE-2025-38668-e33220bb",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5d4261dbb3335221fd9c6e69f909ba79ee6663a7",
"signature_version": "v1",
"target": {
"file": "drivers/regulator/core.c",
"function": "regulator_remove_coupling"
},
"deprecated": false
},
{
"digest": {
"function_hash": "294505832959268315033934477709041289169",
"length": 941.0
},
"id": "CVE-2025-38668-e3ac48dc",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca9bef9ba1a6be640c87bf802d2e9e696021576a",
"signature_version": "v1",
"target": {
"file": "drivers/regulator/core.c",
"function": "regulator_remove_coupling"
},
"deprecated": false
}
]