Skip to main content
← All vulnerabilities
CVE-2022-50250

regulator: core: fix use_count leakage when handling boot-on

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 4.19.270, 5.4.229
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix use_count leakage when handling boot-on I found a use_count leakage towards supply regulator of rdev with boot-on option. ┌───────────────────┐ ┌───────────────────┐ │ regulator_dev A │ │ regulator_dev B │ │ (boot-on) │ │ (boot-on) │ │ use_count=0 │◀──supply──│ use_count=1 │ │ │ │ │ └───────────────────┘ └───────────────────┘ In case of rdev(A) configured with `regulator-boot-on', the use_count of supplying regulator(B) will increment inside regulator_enable(rdev->supply). Thus, B will acts like always-on, and further balanced regulator_enable/disable cannot actually disable it anymore. However, B was also configured with `regulator-boot-on', we wish it could be disabled afterwards.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From 4.19.226 · fixed in 4.19.270; From 5.4.7 · fixed in 5.4.229

  • Linux Linux

    5.5

References 7

git.kernel.org