CVE-2026-89504regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer In as3722_get_regulator_dt_data(), of_get_child_by_name() acquires a reference on np, which is then assigned to pdev->dev.of_node. The function immediately calls of_node_put(np), releasing the reference and leaving pdev->dev.of_node as a dangling pointer. Remove the of_node_put(np) call to let the device hold the reference.
- CVSS
- 8.4 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from bc407334e9a6a745de5360395282beb2690adf48 before d9b1407477fb736978b04108073180ca84958936; from bc407334e9a6a745de5360395282beb2690adf48 before bd5606e9da1a01a61c7d2f5df36243414a0142be; from bc407334e9a6a745de5360395282beb2690adf48 before 0bde4f140e90f87ebd49cd9c884c4bb3f19fe931; from bc407334e9a6a745de5360395282beb2690adf48 before eda08b6bd64f01ca9defbfcc9e0c3e30f46cfc02; from bc407334e9a6a745de5360395282beb2690adf48 before d3c1316d84e0a036890b00ae6e4c0b0b80f70c25; from bc407334e9a6a745de5360395282beb2690adf48 before 95342d26f9c6b68a46ab57fa48428a3c4a423dd7; from bc407334e9a6a745de5360395282beb2690adf48 before 8648e29e5c01b6b677c704049189287e27255ccb; from bc407334e9a6a745de5360395282beb2690adf48 before f9324d670ae0b88cbfb0aa48fcaefa5baeb8da4c | CNA record |
References
- https://git.kernel.org/stable/c/d9b1407477fb736978b04108073180ca84958936
- https://git.kernel.org/stable/c/bd5606e9da1a01a61c7d2f5df36243414a0142be
- https://git.kernel.org/stable/c/0bde4f140e90f87ebd49cd9c884c4bb3f19fe931
- https://git.kernel.org/stable/c/eda08b6bd64f01ca9defbfcc9e0c3e30f46cfc02
- https://git.kernel.org/stable/c/d3c1316d84e0a036890b00ae6e4c0b0b80f70c25
- https://git.kernel.org/stable/c/95342d26f9c6b68a46ab57fa48428a3c4a423dd7
- https://git.kernel.org/stable/c/8648e29e5c01b6b677c704049189287e27255ccb
- https://git.kernel.org/stable/c/f9324d670ae0b88cbfb0aa48fcaefa5baeb8da4c
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.