Linux Kernel Vulnerability in WCD9375 Codecs Affects Device Performance

CVE-2025-38423

What is CVE-2025-38423?

A vulnerability was identified in the Linux kernel's handling of the WCD9375 codecs that may lead to improper memory management. Specifically, a double free of regulator supplies occurs if the driver calls 'regulator_bulk_free()' in error and remove paths after successfully obtaining regulator supplies using 'devm_regulator_bulk_get()'. This oversight can cause instability within the system, potentially impacting device performance and reliability.

References