CVE-2025-38423 is a high-severity vulnerability in the Linux kernel's ASoC wcd9375 codec driver. It involves a double free of regulator supplies due to improper handling in the probe path. This flaw can lead to memory corruption with potential confidentiality, integrity, and availability impacts. The issue arises because the driver calls regulator_bulk_free() in error and remove paths despite already acquiring regulator supplies with devm_regulator_bulk_get(), causing a double free.