CVE-2025-68354

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the regulator core where the regulator supply alias list was accessed without proper locking mechanisms. This lack of locking could lead to several issues, including use-after-free conditions if an alias entry is removed during a read operation, the creation of duplicate entries when multiple threads attempt to register the same alias concurrently, and inconsistent alias mappings observed by consumers. The issue stems from concurrent registration, unregistration, and lookup operations racing against each other. The problem is addressed by protecting all traversals, insertions, and deletions on the regulator supply alias list with the regulator list mutex.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.