CVE-2025-38423

HIGH

Linux Kernel < 6.12.35 - Double Free

Title source: rule
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd9375: Fix double free of regulator supplies Driver gets regulator supplies in probe path with devm_regulator_bulk_get(), so should not call regulator_bulk_free() in error and remove paths to avoid double free.

Scores

CVSS v3 7.8
EPSS 0.0002
EPSS Percentile 5.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-415
Status published
Products (3)
linux/Kernel 6.11.0 - 6.12.35linux
linux/Kernel 6.13.0 - 6.15.4linux
linux/linux_kernel 6.11 - 6.12.35
Published Jul 25, 2025
Tracked Since Feb 18, 2026