PT-2025-52890 · Linux+3 · Linux Kernel+3
Published
2025-12-24
·
Updated
2026-05-26
·
CVE-2025-68354
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Linux Kernel (affected versions not specified)
Description
The Linux kernel contains a flaw in the regulator core where the
regulator supply alias list was accessed without proper locking mechanisms. This lack of locking could lead to several issues, including use-after-free conditions if an alias entry is removed during a read operation, the creation of duplicate entries when multiple threads attempt to register the same alias concurrently, and inconsistent alias mappings observed by consumers. The issue stems from concurrent registration, unregistration, and lookup operations racing against each other. The problem is addressed by protecting all traversals, insertions, and deletions on the regulator supply alias list with the regulator list mutex.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linux Kernel
Linuxmint
Ubuntu