Wind River Support Network

HomeDefectsLIN1023-13927
Acknowledged

LIN1023-13927 : Security Advisory - linux - CVE-2025-38259

Created: Jul 9, 2025    Updated: Jul 10, 2025
Found In Version: 10.23.30.1
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:EOL][EOL]ASoC: codecs: wcd9335: Fix missing free of regulator supplies[EOL][EOL]Driver gets and enables all regulator supplies in probe path[EOL](wcd9335_parse_dt() and wcd9335_power_on_reset()), but does not cleanup[EOL]in final error paths and in unbind (missing remove() callback).  This[EOL]leads to leaked memory and unbalanced regulator enable count during[EOL]probe errors or unbind.[EOL][EOL]Fix this by converting entire code into devm_regulator_bulk_get_enable()[EOL]which also greatly simplifies the code.

CREATE(Triage):(User=admin) [CVE-2025-38259 (https://nvd.nist.gov/vuln/detail/CVE-2025-38259)
Live chat
Online