CVE-2025-38027

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

regulator: max20086: fix invalid memory access

max20086_parse_regulators_dt() calls of_regulator_match() using an

array of struct of_regulator_match allocated on the stack for the

matches argument.

of_regulator_match() calls devm_of_regulator_put_matches(), which calls

devres_alloc() to allocate a struct devm_of_regulator_matches which will

be de-allocated using devm_of_regulator_put_matches().

struct devm_of_regulator_matches is populated with the stack allocated

matches array.

If the device fails to probe, devm_of_regulator_put_matches() will be

called and will try to call of_node_put() on that stack pointer,

generating the following dmesg entries:

max20086 6-0028: Failed to read DEVICE_ID reg: -121

kobject: '\xc0$\xa5\x03' (000000002cebcb7a): is not initialized, yet

kobject_put() is being called.

Followed by a stack trace matching the call flow described above.

Switch to allocating the matches array using de

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References