PT-2025-30828 · Linux+4 · Linux Kernel+4

Published 2025-05-26 · Updated 2026-02-27 · CVE-2025-38423

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A double free issue exists in the ASoC codecs for wcd9375. The driver obtains regulator supplies via devm regulator bulk get(), and should not call regulator bulk free() in error or removal paths to prevent a double free.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

BDU:2025-11511

CVE-2025-38423

OPENSUSE-SU-2026:20287-1

SUSE-SU-2026:20555-1

SUSE-SU-2026:20599-1

SUSE-SU-2026:20615-1

USN-7833-1

USN-7833-2

USN-7833-3

USN-7833-4

USN-7834-1

USN-7856-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Ubuntu

Wcd9375

References · 657

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38423.json · Exploit
• https://ubuntu.com/security/CVE-2025-38334 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38087 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38405 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7856-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7833-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38406 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38224 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38377 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38355 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38339 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38245 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38196 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38416 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38236 · Vendor Advisory