In the Linux kernel, the following vulnerability has been resolved:

regulator: core: fix use_count leakage when handling boot-on

I found a use_count leakage towards supply regulator of rdev with
boot-on option.

┌───────────────────┐ ┌───────────────────┐
│ regulator_dev A │ │ regulator_dev B │
│ (boot-on) │ │ (boot-on) │
│ use_count=0 │◀──supply──│ use_count=1 │
│ │ │ │
└───────────────────┘ └───────────────────┘

In case of rdev(A) configured with `regulator-boot-on', the use_count
of supplying regulator(B) will increment inside
regulator_enable(rdev->supply).

Thus, B will acts like always-on, and further balanced
regulator_enable/disable cannot actually disable it anymore.

However, B was also configured with `regulator-boot-on', we wish it
could be disabled afterwards.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0016.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
dc1b1d7faf616ed663d0bba9be5abb4d1ed35d01 affected < dc3391d49479bc2bf8a2b88dbf86fdd800882fee
f44b07472f29ae313ce875dc7b9c75b100c608b8 affected < 5bfc53df288e8ea54ca6866fb92034214940183f
089b3f61ecfc43ca4ea26d595e1d31ead6de3f7b affected < 4b737246ff50f810d6ab4be13c1388a07f0c14b1
089b3f61ecfc43ca4ea26d595e1d31ead6de3f7b affected < feb847e6591e8c7a09cc39721cc9ca74fd9a5d80
089b3f61ecfc43ca4ea26d595e1d31ead6de3f7b affected < 4dd6e1cc9c7403f1ee1b7eee85bc31b797ae8347
089b3f61ecfc43ca4ea26d595e1d31ead6de3f7b affected < bc6c381df5793ebcf32db88a3e65acf7870379fc
089b3f61ecfc43ca4ea26d595e1d31ead6de3f7b affected < 0591b14ce0398125439c759f889647369aa616a0
4.19.226 affected < 4.19.270
5.4.7 affected < 5.4.229
Linux Linux affected
Version Status Constraints
5.5 affected —
0 unaffected < 5.5
4.19.270 unaffected ≤ 4.19.*
5.4.229 unaffected ≤ 5.4.*
5.10.163 unaffected ≤ 5.10.*
5.15.86 unaffected ≤ 5.15.*
6.0.16 unaffected ≤ 6.0.*
6.1.2 unaffected ≤ 6.1.*
6.2 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2022-55502 In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix use_count leakage when handling boot-on I found a use_count leakage towards supply regulator of rdev with boot-on option. ┌───────────────────┐ ┌───────────────────┐ │ regulator_dev A │ │ regulator_dev B │ │ (boot-on) │ │ (boot-on) │ │ use_count=0 │◀──supply──│ use_count=1 │ │ │ │ │ └───────────────────┘ └───────────────────┘ In case of rdev(A) configured with `regulator-boot-on', the use_count of supplying regulator(B) will increment inside regulator_enable(rdev->supply). Thus, B will acts like always-on, and further balanced regulator_enable/disable cannot actually disable it anymore. However, B was also configured with `regulator-boot-on', we wish it could be disabled afterwards.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0591b14ce0398125439c759f889647369aa616a0 cve-icon cve-icon
https://git.kernel.org/stable/c/4b737246ff50f810d6ab4be13c1388a07f0c14b1 cve-icon cve-icon
https://git.kernel.org/stable/c/4dd6e1cc9c7403f1ee1b7eee85bc31b797ae8347 cve-icon cve-icon
https://git.kernel.org/stable/c/5bfc53df288e8ea54ca6866fb92034214940183f cve-icon cve-icon
https://git.kernel.org/stable/c/bc6c381df5793ebcf32db88a3e65acf7870379fc cve-icon cve-icon
https://git.kernel.org/stable/c/dc3391d49479bc2bf8a2b88dbf86fdd800882fee cve-icon cve-icon
https://git.kernel.org/stable/c/feb847e6591e8c7a09cc39721cc9ca74fd9a5d80 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025091549-CVE-2022-50250-1be1@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50250 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50250 cve-icon
History

Fri, 06 Nov 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 25 Nov 2025 14:45:00 +0000

Type Values Removed Values Added
Weaknesses NVD-CWE-Other
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Wed, 17 Sep 2025 11:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Tue, 16 Sep 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Mon, 15 Sep 2025 14:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix use_count leakage when handling boot-on I found a use_count leakage towards supply regulator of rdev with boot-on option. ┌───────────────────┐ ┌───────────────────┐ │ regulator_dev A │ │ regulator_dev B │ │ (boot-on) │ │ (boot-on) │ │ use_count=0 │◀──supply──│ use_count=1 │ │ │ │ │ └───────────────────┘ └───────────────────┘ In case of rdev(A) configured with `regulator-boot-on', the use_count of supplying regulator(B) will increment inside regulator_enable(rdev->supply). Thus, B will acts like always-on, and further balanced regulator_enable/disable cannot actually disable it anymore. However, B was also configured with `regulator-boot-on', we wish it could be disabled afterwards.
Title regulator: core: fix use_count leakage when handling boot-on
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-11-05T20:10:31.267Z

Reserved: 2025-09-15T13:58:00.973Z

Link: CVE-2022-50250

cve-icon Vulnrichment

Updated: 2026-11-05T20:07:56.472Z

cve-icon NVD

Status : Analyzed

Published: 2025-09-15T14:15:35.623

Modified: 2026-11-05T20:17:29.607

Link: CVE-2022-50250

cve-icon Redhat

Severity : Low

Publid Date: 2025-09-15T00:00:00Z

Links: CVE-2022-50250 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-09-17T10:08:29Z

Weaknesses