CVE-2025-22095: PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
In the Linux kernel, the following vulnerability has been resolved:
PCI: brcmstb: Fix error path after a call to regulatorbulkget()
If the regulatorbulkget() returns an error and no regulators are created, we need to set their number to zero.
If we don't do this and the PCIe link up fails, a call to the regulatorbulkfree() will result in a kernel panic.
While at it, print the error value, as we cannot return an error upwards as the kernel will WARN() on an error from addbus().
[kwilczynski: commit log, use comma in the message to match style with other similar messages]
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22095?
CVE-2025-22095 has been classified with a low severity level due to its limited impact on affected systems.
How do I fix CVE-2025-22095?
To fix CVE-2025-22095, update your Linux kernel to the latest version where this vulnerability has been addressed.
What systems are affected by CVE-2025-22095?
CVE-2025-22095 affects the Linux kernel, particularly systems utilizing the brcmstb PCIe interface with regulator support.
What does CVE-2025-22095 entail?
CVE-2025-22095 involves an error in the PCI brcmstb driver that fails to properly handle error paths related to regulator_bulk_get().
Has CVE-2025-22095 been patched?
Yes, CVE-2025-22095 has been resolved in recent kernel updates improving the handling of regulator errors.