CVE-2022-50250

regulator: core: fix use_count leakage when handling boot-on

State
Published
Severity
Not scored
Published
Sep 15, 2025
Updated
May 23, 2026
Reserved
Sep 15, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

regulator: core: fix use_count leakage when handling boot-on

I found a use_count leakage towards supply regulator of rdev with boot-on option.

┌───────────────────┐ ┌───────────────────┐ │ regulator_dev A │ │ regulator_dev B │ │ (boot-on) │ │ (boot-on) │ │ use_count=0 │◀──supply──│ use_count=1 │ │ │ │ │ └───────────────────┘ └───────────────────┘

In case of rdev(A) configured with `regulator-boot-on', the use_count of supplying regulator(B) will increment inside regulator_enable(rdev->supply).

Thus, B will acts like always-on, and further balanced regulator_enable/disable cannot actually disable it anymore.

However, B was also configured with `regulator-boot-on', we wish it could be disabled afterwards.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • dc1b1d7faf616ed663d0bba9be5abb4d1ed35d01 to before dc3391d49479bc2bf8a2b88dbf86fdd800882feeAffected
  • f44b07472f29ae313ce875dc7b9c75b100c608b8 to before 5bfc53df288e8ea54ca6866fb92034214940183fAffected
  • 089b3f61ecfc43ca4ea26d595e1d31ead6de3f7b to before 4b737246ff50f810d6ab4be13c1388a07f0c14b1Affected
  • 089b3f61ecfc43ca4ea26d595e1d31ead6de3f7b to before feb847e6591e8c7a09cc39721cc9ca74fd9a5d80Affected
  • 089b3f61ecfc43ca4ea26d595e1d31ead6de3f7b to before 4dd6e1cc9c7403f1ee1b7eee85bc31b797ae8347Affected
  • 089b3f61ecfc43ca4ea26d595e1d31ead6de3f7b to before bc6c381df5793ebcf32db88a3e65acf7870379fcAffected
  • 089b3f61ecfc43ca4ea26d595e1d31ead6de3f7b to before 0591b14ce0398125439c759f889647369aa616a0Affected
  • 4.19.226 to before 4.19.270Affected
  • 5.4.7 to before 5.4.229Affected
LinuxLinux
  • 5.5Affected
  • before 5.5Not affected
  • 4.19.270 through 4.19.*Not affected
  • 5.4.229 through 5.4.*Not affected
  • 5.10.163 through 5.10.*Not affected
  • 5.15.86 through 5.15.*Not affected
  • 6.0.16 through 6.0.*Not affected
  • 6.1.2 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.