CVE-2022-50250

regulator: core: fix use_count leakage when handling boot-on

MEDIUM
5.5
CVSS Score
Published: September 15, 2025 at 02:02 PM UTC
Updated: June 17, 2026 at 05:23 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix use_count leakage when handling boot-on I found a use_count leakage towards supply regulator of rdev with boot-on option. ┌───────────────────┐ ┌───────────────────┐ │ regulator_dev A │ │ regulator_dev B │ │ (boot-on) │ │ (boot-on) │ │ use_count=0 │◀──supply──│ use_count=1 │ │ │ │ │ └───────────────────┘ └───────────────────┘ In case of rdev(A) configured with `regulator-boot-on', the use_count of supplying regulator(B) will increment inside regulator_enable(rdev->supply). Thus, B will acts like always-on, and further balanced regulator_enable/disable cannot actually disable it anymore. However, B was also configured with `regulator-boot-on', we wish it could be disabled afterwards.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v < 4.19.2704.19.226 ≤ v < 4.19.2704.20 ≤ v < 5.4.2295.11 ≤ v < 5.15.865.16 ≤ v < 6.0.165.4.7 ≤ v < 5.4.2295.5 ≤ v < 5.10.1635.5 ≤ v < 5.15.865.5 ≤ v < 6.0.165.5 ≤ v < 6.1.25.5 ≤ v < 6.26.1 ≤ v < 6.1.24.19.2265.4.75.589b3f61ecfc43ca4ea26d595e1d31ead6de3f7bdc1b1d7faf616ed663d0bba9be5abb4d1ed35d01f44b07472f29ae313ce875dc7b9c75b100c608b8
Vendor states this is fixed in 0591b14ce0398125439c759f889647369aa616a0 (fixed)
Vendor states this is fixed in 4b737246ff50f810d6ab4be13c1388a07f0c14b1 (fixed)
Vendor states this is fixed in 4dd6e1cc9c7403f1ee1b7eee85bc31b797ae8347 (fixed)
Vendor states this is fixed in 5bfc53df288e8ea54ca6866fb92034214940183f (fixed)
Vendor states this is fixed in bc6c381df5793ebcf32db88a3e65acf7870379fc (fixed)
Vendor states this is fixed in dc3391d49479bc2bf8a2b88dbf86fdd800882fee (fixed)
Vendor states this is fixed in feb847e6591e8c7a09cc39721cc9ca74fd9a5d80 (fixed)
Vendor states this is fixed in 4.19.270 (unaffected)
Vendor states this is fixed in 5.10.163 (unaffected)
Vendor states this is fixed in 5.15.86 (unaffected)
Vendor states this is fixed in 5.4.229 (unaffected)
Vendor states this is fixed in 5.5 (unaffected)
Vendor states this is fixed in 6.0.16 (unaffected)
Vendor states this is fixed in 6.1.2 (unaffected)
Vendor states this is fixed in 6.2 (unaffected)

References (7)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/0591b14ce0398125439c759f889647369aa616a0
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/4b737246ff50f810d6ab4be13c1388a07f0c14b1
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/4dd6e1cc9c7403f1ee1b7eee85bc31b797ae8347
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/5bfc53df288e8ea54ca6866fb92034214940183f
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/bc6c381df5793ebcf32db88a3e65acf7870379fc
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/dc3391d49479bc2bf8a2b88dbf86fdd800882fee
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/feb847e6591e8c7a09cc39721cc9ca74fd9a5d80

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-Other

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card