CVE-2025-38668

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A flaw exists in the Linux kernel’s regulator core functionality where a failure to reset coupling data after freeing coupled regulators can lead to a NULL pointer dereference during unbinding. This can occur during runtime power management or other regulator operations that depend on coupling metadata. An example of this issue was observed on ridesx4, where unbinding a 'reg-dummy' platform device triggered a panic in the regulator lock recursive() function due to stale coupling state.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.