Memory Leak Vulnerability in Linux Kernel ASoC Codec for WCD9335 by Linux

CVE-2025-38259

What is CVE-2025-38259?

A memory leak vulnerability exists in the Linux Kernel ASoC codec driver for the WCD9335 component due to improper handling of regulator supplies. When the driver fails to clean up regulator supplies during the probe path and unbinding process, it can lead to memory leaks and unbalanced enable counts. This issue can result in degraded system performance and increased memory usage. The vulnerability has been addressed by implementing the devm_regulator_bulk_get_enable() function, streamlining the handling of regulator supplies and ensuring proper resource management.

References