CVE-2022-50250

regulator: core: fix use_count leakage when handling boot-on

published September 15, 2025

CVSS
—
EPSS
0%
Percentile
4.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

regulator: core: fix use_count leakage when handling boot-on

I found a use_count leakage towards supply regulator of rdev with

boot-on option.

┌───────────────────┐ ┌───────────────────┐

│ regulator_dev A │ │ regulator_dev B │

│ (boot-on) │ │ (boot-on) │

│ use_count=0 │◀──supply──│ use_count=1 │

│ │ │ │

└───────────────────┘ └───────────────────┘

In case of rdev(A) configured with `regulator-boot-on', the use_count

of supplying regulator(B) will increment inside

regulator_enable(rdev->supply).

Thus, B will acts like always-on, and further balanced

regulator_enable/disable cannot actually disable it anymore.

However, B was also configured with `regulator-boot-on', we wish it

could be disabled afterwards.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00160 · 4.8th percentile
Published
2025-09-15T14:02Z
EPSS history
Timeline
  • 15 SEP 14:02Z
    regulator: core: fix use_count leakage when handling boot-on
    cvelistv5