NULL Pointer Dereference in Linux Kernel Regulator Component

CVE-2025-38668

What is CVE-2025-38668?

A vulnerability in the Linux kernel's regulator component can cause a NULL pointer dereference due to unhandled coupling metadata. This occurs when the coupling_desc.n_coupled is not reset post-unbind, leading to potential system panics during operations that involve regulators. For instance, in scenarios involving runtime power management, a failure to manage the coupling state correctly can trigger critical errors, impacting system stability and reliability. Developers and system administrators should ensure that n_coupled is properly reset to mitigate access to invalid pointers.

References