CVE-2025-39771

published 2025-09-11

CVE-2025-39771: In the Linux kernel, the following vulnerability has been resolved: regulator: pca9450: Use devm_register_sys_off_handler With module test, there is error…

Priority P4 19 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

In the Linux kernel, the following vulnerability has been resolved:

regulator: pca9450: Use devm_register_sys_off_handler

With module test, there is error dump:
------------[ cut here ]------------
notifier callback pca9450_i2c_restart_handler already registered
WARNING: kernel/notifier.c:23 at notifier_chain_register+0x5c/0x88,
CPU#0: kworker/u16:3/50
Call trace:
notifier_chain_register+0x5c/0x88 (P)
atomic_notifier_chain_register+0x30/0x58
register_restart_handler+0x1c/0x28
pca9450_i2c_probe+0x418/0x538
i2c_device_probe+0x220/0x3d0
really_probe+0x114/0x410
__driver_probe_device+0xa0/0x150
driver_probe_device+0x40/0x114
__device_attach_driver+0xd4/0x12c

So use devm_register_sys_off_handler to let kernel handle the resource
free to avoid kernel dump.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 6.16.5-1 (forky)	linux 6.16.5-1 (forky)
linux	linux	—	—
linux	linux	>= 6157e62b07d9331cc1d4d9d525dab33d45b0e83c < 7a8c8aa0b0b2c62a0232bf868def85f3069ba7a7	7a8c8aa0b0b2c62a0232bf868def85f3069ba7a7
linux	linux	>= 6157e62b07d9331cc1d4d9d525dab33d45b0e83c < 447be50598c05499f7ccc2b1f6ddb3da30f8099a	447be50598c05499f7ccc2b1f6ddb3da30f8099a
linux	linux_kernel	—	—
linux	linux_kernel	>= 0 < 6.16.5-1	6.16.5-1
linux	linux_kernel	>= 6.16 < 6.16.4	6.16.4

CVSS provenance

nvd v3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

osv 5.5 MEDIUM

vendor_debian 5.5 LOW

vendor_redhat 5.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.