CVE-2025-39771
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-09-11

Last updated on: 2025-11-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: regulator: pca9450: Use devm_register_sys_off_handler With module test, there is error dump: ------------[ cut here ]------------ notifier callback pca9450_i2c_restart_handler already registered WARNING: kernel/notifier.c:23 at notifier_chain_register+0x5c/0x88, CPU#0: kworker/u16:3/50 Call trace: notifier_chain_register+0x5c/0x88 (P) atomic_notifier_chain_register+0x30/0x58 register_restart_handler+0x1c/0x28 pca9450_i2c_probe+0x418/0x538 i2c_device_probe+0x220/0x3d0 really_probe+0x114/0x410 __driver_probe_device+0xa0/0x150 driver_probe_device+0x40/0x114 __device_attach_driver+0xd4/0x12c So use devm_register_sys_off_handler to let kernel handle the resource free to avoid kernel dump.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-09-11
Last Modified
2025-11-25
Generated
2026-06-16
AI Q&A
2025-09-11
EPSS Evaluated
2026-06-15
NVD
CVE-2025-39771
Affected Vendors & Products
Showing 3 associated CPEs
Vendor Product Version / Range
linux linux_kernel 6.17
linux linux_kernel 6.17
linux linux_kernel From 5.15.160 (inc) to 5.16 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-NVD-CWE-noinfo
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability occurs in the Linux kernel's regulator pca9450 module, where a notifier callback (pca9450_i2c_restart_handler) is registered multiple times, causing an error dump and kernel warning. The issue arises because the module does not properly manage the registration of the restart handler, leading to a kernel dump during module testing. The fix involves using devm_register_sys_off_handler to let the kernel handle resource freeing automatically, preventing the kernel dump.

Impact Analysis

This vulnerability can cause kernel warnings and error dumps, which may lead to system instability or crashes during the operation of the pca9450 regulator module. Such instability can affect system reliability and availability, potentially disrupting services or applications relying on the Linux kernel.

Detection Guidance

This vulnerability can be detected by checking for the specific kernel error message related to the pca9450 regulator module. You can look for the following error in the kernel logs: 'notifier callback pca9450_i2c_restart_handler already registered'. Use the command 'dmesg | grep pca9450_i2c_restart_handler' or 'journalctl -k | grep pca9450_i2c_restart_handler' to find this error message in your system logs.

Mitigation Strategies

To mitigate this vulnerability, update the Linux kernel to a version where the pca9450 regulator module uses devm_register_sys_off_handler. This change allows the kernel to handle resource freeing properly and avoids the kernel dump caused by the notifier callback being registered multiple times.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-39771. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart