CVE-2025-38535

phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode

State: Published
Severity: Not scored
Published: Aug 16, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode

When transitioning from USB_ROLE_DEVICE to USB_ROLE_NONE, the code assumed that the regulator should be disabled. However, if the regulator is marked as always-on, regulator_is_enabled() continues to return true, leading to an incorrect attempt to disable a regulator which is not enabled.

This can result in warnings such as:

[ 250.155624] WARNING: CPU: 1 PID: 7326 at drivers/regulator/core.c:3004 _regulator_disable+0xe4/0x1a0 [ 250.155652] unbalanced disables for VIN_SYS_5V0

To fix this, we move the regulator control logic into tegra186_xusb_padctl_id_override() function since it's directly related to the ID override state. The regulator is now only disabled when the role transitions from USB_ROLE_HOST to USB_ROLE_NONE, by checking the VBUS_ID register. This ensures that regulator enable/disable operations are properly balanced and only occur when actually transitioning to/from host mode.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	49d46e3c7e597e8b00c6fc16e6fd7a92044f4371 to before ceb645ac6ce052609ee5c8f819a80e8881789b04Affected 49d46e3c7e597e8b00c6fc16e6fd7a92044f4371 to before cdcb0ffd6448f6be898956913a42bd08e59fb2aeAffected 49d46e3c7e597e8b00c6fc16e6fd7a92044f4371 to before 1bb85b5c2bd43b687c3d54eb6328917f90dd38fcAffected 49d46e3c7e597e8b00c6fc16e6fd7a92044f4371 to before 5367cdeb75cb6c687ca468450bceb2602ab239d8Affected 49d46e3c7e597e8b00c6fc16e6fd7a92044f4371 to before ec7f98ff05f0649af0adeb4808c7ba23d6111ef9Affected 49d46e3c7e597e8b00c6fc16e6fd7a92044f4371 to before eaa420339658615d26c1cc95cd6cf720b9aebfcaAffected 49d46e3c7e597e8b00c6fc16e6fd7a92044f4371 to before cefc1caee9dd06c69e2d807edc5949b329f52b22Affected
LinuxLinux	5.7Affected before 5.7Not affected 5.10.241 through 5.10.Not affected 5.15.190 through 5.15.Not affected 6.1.147 through 6.1.Not affected 6.6.100 through 6.6.Not affected 6.12.40 through 6.12.Not affected 6.15.8 through 6.15.Not affected 6.16 and laterNot affected

Product

Versions

LinuxLinux

49d46e3c7e597e8b00c6fc16e6fd7a92044f4371 to before ceb645ac6ce052609ee5c8f819a80e8881789b04Affected
49d46e3c7e597e8b00c6fc16e6fd7a92044f4371 to before cdcb0ffd6448f6be898956913a42bd08e59fb2aeAffected
49d46e3c7e597e8b00c6fc16e6fd7a92044f4371 to before 1bb85b5c2bd43b687c3d54eb6328917f90dd38fcAffected
49d46e3c7e597e8b00c6fc16e6fd7a92044f4371 to before 5367cdeb75cb6c687ca468450bceb2602ab239d8Affected
49d46e3c7e597e8b00c6fc16e6fd7a92044f4371 to before ec7f98ff05f0649af0adeb4808c7ba23d6111ef9Affected
49d46e3c7e597e8b00c6fc16e6fd7a92044f4371 to before eaa420339658615d26c1cc95cd6cf720b9aebfcaAffected
49d46e3c7e597e8b00c6fc16e6fd7a92044f4371 to before cefc1caee9dd06c69e2d807edc5949b329f52b22Affected

LinuxLinux

5.7Affected
before 5.7Not affected
5.10.241 through 5.10.*Not affected
5.15.190 through 5.15.*Not affected
6.1.147 through 6.1.*Not affected
6.6.100 through 6.6.*Not affected
6.12.40 through 6.12.*Not affected
6.15.8 through 6.15.*Not affected
6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.