CVE-2025-22008: linux
CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2025-22008DEBIAN-CVE-2025-22008
Published 08-04-2025Last modified 11-05-2026
Vulnerability summary
CVE-2025-22008 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.20% chance of exploitation in the next 30 days, higher than 9% of scored vulnerabilities.
CVSS score
5.5/10
010
Medium · v3.1 (NVD)EPSS score
0.20%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 47 · Related 42DLA-4178-1DLA-4193-1DSA-5900-1MGASA-2025-0142MGASA-2025-0146SUSE-SU-2025:01600-1SUSE-SU-2025:01614-1SUSE-SU-2025:01707-1SUSE-SU-2025:01919-1SUSE-SU-2025:01951-1SUSE-SU-2025:01964-1SUSE-SU-2025:01967-1SUSE-SU-2025:20192-1SUSE-SU-2025:20206-1SUSE-SU-2025:20270-1SUSE-SU-2025:20283-1USN-7591-1USN-7591-2USN-7591-3USN-7591-4USN-7591-5USN-7591-6USN-7592-1USN-7593-1USN-7597-1USN-7597-2USN-7598-1USN-7602-1USN-7605-1USN-7605-2USN-7606-1USN-7628-1USN-7655-1USN-7764-1USN-7764-2USN-7765-1USN-7766-1USN-7767-1USN-7767-2USN-7779-1USN-7790-1USN-7800-1USN-7801-1USN-7801-2USN-7801-3USN-7802-1USN-7809-1
Timeline
- 08-04-2025PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: regulator: check that dummy regulator has been probed before using it Due to asynchronous driver probing there is a chance that the dummy regulator hasn't already been probed when first accessing it.
CVSS metrics
3 scores · 3 sources · 1 versionMedium 5.5Preferred score · NVD (NIST)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.20%
Chance of exploitation in the next 30 days
Percentile
9%
Versus all other CVEs
30-day change
0.00 pp
From 0.20% on 19-09-2026
19-09-202619-10-2026
EPSS score0.20%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu138 products
- linuxAll versions (No fix recorded) | < 5.15.0-142.152 | < 6.8.0-84.84
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.15.0-1086.93 | < 6.8.0-1039.41
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 259b93b21a9ffe5117af4dfb5505437e463c6a5a, < 998b1aae22dca87da392ea35f089406cbef6032d | ≥ 259b93b21a9ffe5117af4dfb5505437e463c6a5a, < a99f1254b11eaadd0794b74a8178bad92ab01cae | ≥ 259b93b21a9ffe5117af4dfb5505437e463c6a5a, < 21e3fdf3146f9c63888d6bfabbd553434a5fb93f | ≥ 259b93b21a9ffe5117af4dfb5505437e463c6a5a, < 2c7a50bec4958f1d1c84d19cde518d0e96a676fd | 6.4
- linux_kernel< 5.10.236 | ≥ 5.11, < 5.15.180 | ≥ 5.16, < 6.1.132 | ≥ 6.2, < 6.6.85 | ≥ 6.7, < 6.12.21 | ≥ 6.13, < 6.13.9 | 6.14:rc1 | 6.14:rc2 | 6.14:rc3 | 6.14:rc4 | 6.14:rc5 | 6.14:rc6 | 6.14:rc7
Debian1 product
- linux< 6.1.133-1 | < 6.12.21-1
3 vendors · 141 products