CVE-2022-49528

CVE-2022-49528

Medium · published February 26, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
12.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: i2c: dw9714: Disable the regulator when the driver fails to probe

When the driver fails to probe, we will get the following splat:

[ 59.305988] ------------[ cut here ]------------

[ 59.306417] WARNING: CPU: 2 PID: 395 at drivers/regulator/core.c:2257 _regulator_put+0x3ec/0x4e0

[ 59.310345] RIP: 0010:_regulator_put+0x3ec/0x4e0

[ 59.318362] Call Trace:

[ 59.318582] <TASK>

[ 59.318765] regulator_put+0x1f/0x30

[ 59.319058] devres_release_group+0x319/0x3d0

[ 59.319420] i2c_device_probe+0x766/0x940

Fix this by disabling the regulator in error handling.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00222 · 12.2th percentile
Published
2025-02-26T12:01Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel≥ 4.13, < 5.18.35.18.3
References (2)
EPSS history
Timeline
  • 26 FEB 02:13Z
    media: i2c: dw9714: Disable the regulator when the driver fails to probe
    cvelistv5