CVE-2025-38535 Details
Description
In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode When transitioning from USB_ROLE_DEVICE to USB_ROLE_NONE, the code assumed that the regulator should be disabled. However, if the regulator is marked as always-on, regulator_is_enabled() continues to return true, leading to an incorrect attempt to disable a regulator which is not enabled. This can result in warnings such as: [ 250.155624] WARNING: CPU: 1 PID: 7326 at drivers/regulator/core.c:3004 _regulator_disable+0xe4/0x1a0 [ 250.155652] unbalanced disables for VIN_SYS_5V0 To fix this, we move the regulator control logic into tegra186_xusb_padctl_id_override() function since it's directly related to the ID override state. The regulator is now only disabled when the role transitions from USB_ROLE_HOST to USB_ROLE_NONE, by checking the VBUS_ID register. This ensures that regulator enable/disable operations are properly balanced and only occur when actually transitioning to/from host mode.
A vulnerability in the Linux kernel's handling of USB role transitions can lead to unbalanced regulator disable operations. This issue occurs in the UTMI PHY mode on Tegra186, when the USB role changes from device to none. The code incorrectly assumes the regulator should be disabled, but if the regulator is always-on, it remains enabled. This mismatch can trigger warnings about unbalanced disables for the VIN_SYS_5V0 regulator. The vulnerability arises because the regulator control logic does not properly account for the ID override state, leading to potential mismanagement of power regulation during USB role transitions.
The vulnerability has been addressed in the Linux kernel. Users should upgrade to the latest version where this issue has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/1bb85b5c2bd43b687c3d54eb6328917f90dd38fc | kernel.org | Patch |
| https://git.kernel.org/stable/c/5367cdeb75cb6c687ca468450bceb2602ab239d8 | kernel.org | Patch |
| https://git.kernel.org/stable/c/cdcb0ffd6448f6be898956913a42bd08e59fb2ae | kernel.org | Patch |
| https://git.kernel.org/stable/c/ceb645ac6ce052609ee5c8f819a80e8881789b04 | kernel.org | Patch |
| https://git.kernel.org/stable/c/cefc1caee9dd06c69e2d807edc5949b329f52b22 | kernel.org | Patch |
| https://git.kernel.org/stable/c/eaa420339658615d26c1cc95cd6cf720b9aebfca | kernel.org | Patch |
| https://git.kernel.org/stable/c/ec7f98ff05f0649af0adeb4808c7ba23d6111ef9 | kernel.org | Patch |
| https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html | CVE | Mailing ListThird Party Advisory |
| https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html | CVE | Mailing ListThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.7, < 5.10.241 >= 5.11, < 5.15.190 >= 5.16, < 6.1.147 >= 6.2, < 6.6.100 >= 6.7, < 6.12.40 >= 6.13, < 6.15.8 6.16 rc1 6.16 rc2 6.16 rc3 6.16 rc4 6.16 rc5 6.16 rc6 |
CPE
Remediation
| |
| debian debian linux | 11.0 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jan 7, 2026 | Initial Analysis | [email protected] |
| Nov 3, 2025 | CVE Modified | CVE |
| Aug 28, 2025 | CVE Modified | kernel.org |
| Aug 16, 2025 | New CVE Received | kernel.org |