CVE-2026-89504

regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer

State: Published
Severity: 8.4 High
Published: Sep 11, 2026
Updated: Oct 19, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer

In as3722_get_regulator_dt_data(), of_get_child_by_name() acquires a reference on np, which is then assigned to pdev->dev.of_node. The function immediately calls of_node_put(np), releasing the reference and leaving pdev->dev.of_node as a dangling pointer.

Remove the of_node_put(np) call to let the device hold the reference.

Scores

CVSS	Score	Vector	Source
3.1	8.4 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	bc407334e9a6a745de5360395282beb2690adf48 to before d9b1407477fb736978b04108073180ca84958936Affected bc407334e9a6a745de5360395282beb2690adf48 to before bd5606e9da1a01a61c7d2f5df36243414a0142beAffected bc407334e9a6a745de5360395282beb2690adf48 to before 0bde4f140e90f87ebd49cd9c884c4bb3f19fe931Affected bc407334e9a6a745de5360395282beb2690adf48 to before eda08b6bd64f01ca9defbfcc9e0c3e30f46cfc02Affected bc407334e9a6a745de5360395282beb2690adf48 to before d3c1316d84e0a036890b00ae6e4c0b0b80f70c25Affected bc407334e9a6a745de5360395282beb2690adf48 to before 95342d26f9c6b68a46ab57fa48428a3c4a423dd7Affected bc407334e9a6a745de5360395282beb2690adf48 to before 8648e29e5c01b6b677c704049189287e27255ccbAffected bc407334e9a6a745de5360395282beb2690adf48 to before f9324d670ae0b88cbfb0aa48fcaefa5baeb8da4cAffected
LinuxLinux	3.13Affected before 3.13Not affected 5.10.270 through 5.10.Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.109 through 6.12.Not affected 6.18.50 through 6.18.Not affected 7.2.4 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

bc407334e9a6a745de5360395282beb2690adf48 to before d9b1407477fb736978b04108073180ca84958936Affected
bc407334e9a6a745de5360395282beb2690adf48 to before bd5606e9da1a01a61c7d2f5df36243414a0142beAffected
bc407334e9a6a745de5360395282beb2690adf48 to before 0bde4f140e90f87ebd49cd9c884c4bb3f19fe931Affected
bc407334e9a6a745de5360395282beb2690adf48 to before eda08b6bd64f01ca9defbfcc9e0c3e30f46cfc02Affected
bc407334e9a6a745de5360395282beb2690adf48 to before d3c1316d84e0a036890b00ae6e4c0b0b80f70c25Affected
bc407334e9a6a745de5360395282beb2690adf48 to before 95342d26f9c6b68a46ab57fa48428a3c4a423dd7Affected
bc407334e9a6a745de5360395282beb2690adf48 to before 8648e29e5c01b6b677c704049189287e27255ccbAffected
bc407334e9a6a745de5360395282beb2690adf48 to before f9324d670ae0b88cbfb0aa48fcaefa5baeb8da4cAffected

LinuxLinux

3.13Affected
before 3.13Not affected
5.10.270 through 5.10.*Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.109 through 6.12.*Not affected
6.18.50 through 6.18.*Not affected
7.2.4 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.