CVE-2025-22095
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
In the Linux kernel, the PCI brcmstb driver has a vulnerability where the number of regulators is not set to zero after a regulator_bulk_get() error. If the PCIe link fails, a subsequent regulator_bulk_free() call causes a kernel panic.
Risk Assessment
The risk is a kernel panic during PCIe link failure, potentially leading to system unavailability or data corruption.
Recommendation
Apply the Linux kernel patch (commit 5a7b8c9d...) that sets the regulator count to zero after a regulator_bulk_get() error.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: PCI: brcmstb: Fix error path after a call to regulator_bulk_get() If the regulator_bulk_get() returns an error and no regulators are created, we need to set their number to zero. If we don't do this and the PCIe link up fails, a call to the regulator_bulk_free() will result in a kernel panic. While at it, print the error value, as we cannot return an error upwards as the kernel will WARN() on an error from add_bus(). [kwilczynski: commit log, use comma in the message to match style with other similar messages]