Medium 5.5Published Apr 16, 2025

CVE-2025-22095PCI: brcmstb: Fix error path after a call to regulator_bulk_get()

Updated under an hour ago (Oct 27, 2026, 1:40 AM ET)

Does this affect you?

It affects Linux and 4 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: PCI: brcmstb: Fix error path after a call to regulator_bulk_get() If the regulator_bulk_get() returns an error and no regulators are created, we need to set their number to zero. If we don't do this and the PCIe link up fails, a call to the regulator_bulk_free() will result in a kernel panic. While at it, print the error value, as we cannot return an error upwards as the kernel will WARN() on an error from add_bus(). [kwilczynski: commit log, use comma in the message to match style with other similar messages]

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 9e6be018b26347c26a93e63fb50a37ee2c9311de before 99a0efba9f903acbdece548862b6b4cbe7d999e1; from 9e6be018b26347c26a93e63fb50a37ee2c9311de before eedd054834930b8d678f0776cd4b091b8fffbb4a; from 9e6be018b26347c26a93e63fb50a37ee2c9311de before df63321a40cc98e52313cffbff376b8ae9ceffa7; from 9e6be018b26347c26a93e63fb50a37ee2c9311de before 7842e842a9bf6bd5866c84f588353711d131ab1a; 9e6be018b26347c26a93e63fb50a37ee2c9311de builds before 6f44e1fdb006db61394aa4d4c25728ada00842e7; from 9e6be018b26347c26a93e63fb50a37ee2c9311de before 3651ad5249c51cf7eee078e12612557040a6bdb4	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
linux linux_kernel linux:linux_kernel	from 6.0 before 6.1.134; from 6.2 before 6.6.87; from 6.7 before 6.12.23; from 6.13 before 6.13.11; from 6.14 before 6.14.2	NVD

References

References

https://git.kernel.org/stable/c/99a0efba9f903acbdece548862b6b4cbe7d999e1	patch
https://git.kernel.org/stable/c/eedd054834930b8d678f0776cd4b091b8fffbb4a	patch
https://git.kernel.org/stable/c/df63321a40cc98e52313cffbff376b8ae9ceffa7	patch
https://git.kernel.org/stable/c/7842e842a9bf6bd5866c84f588353711d131ab1a	patch
https://git.kernel.org/stable/c/6f44e1fdb006db61394aa4d4c25728ada00842e7	patch
https://git.kernel.org/stable/c/3651ad5249c51cf7eee078e12612557040a6bdb4	patch
https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
https://cert-portal.siemens.com/productcert/html/ssa-019113.html
https://cert-portal.siemens.com/productcert/html/ssa-457936.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.