Regulator Management Vulnerability in Linux Package: Unbalanced Disable Issue
Summary
CVE-2025-38535: In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode When transitioning from USB_ROLE_DEVICE to USB_ROLE_NONE, the code assumed that the... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, providing essential functionalities for managing hardware and system resources. It serves as the foundation for various applications and services, ensuring efficient communication between software and hardware. This vulnerability specifically affects the USB role management within the Linux kernel, which is crucial for devices that rely on USB connections.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified related to the management of regulators during USB role transitions. When switching from USB_ROLE_DEVICE to USB_ROLE_NONE, the code incorrectly assumes that the regulator should be disabled. If the regulator is marked as always-on, the function regulator_is_enabled() returns true, leading to an erroneous attempt to disable a regulator that is not enabled. This can result in warnings and potential instability in the system, as the regulator control logic is not properly balanced.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is advisable to apply the patch as soon as it becomes available to ensure system stability.
Conclusion
The vulnerability in the Linux kernel regarding regulator management during USB role transitions poses a risk of system instability. It is essential to apply the available patches to maintain system integrity and functionality. Regular monitoring using tools like Vulert can help in identifying and addressing such vulnerabilities promptly.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves unbalanced regulator disable operations during USB role transitions in the Linux kernel.
It may lead to system warnings and instability, particularly affecting USB device management.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without needing to sign up.
Yes, patches are available for Debian 12 (version 6.1.147-1) and Debian 13 (version 6.12.41-1).
While there are no specific workarounds, it is crucial to plan for an update as soon as possible to mitigate risks.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
