SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-89504

HIGH · CVSS 8.4 EPSS 0.14%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of device tree nodes in the as3722_get_regulator_dt_data() function, where a premature call to of_node_put() results in a dangling pointer for pdev->dev.of_node. This can lead to potential use-after-free conditions, which may cause system instability or crashes. Organizations using affected Linux kernel versions should prioritize this issue to mitigate risks associated with device management and system reliability.

CVE
CVE-2026-89504
Severity
HIGH
CVSS
8.4
EPSS
0.14%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer In as3722_get_regulator_dt_data(), of_get_child_by_name() acquires a reference on np, which is then assigned to pdev->dev.of_node. The function immediately calls of_node_put(np), releasing the reference and leaving pdev->dev.of_node as a dangling pointer. Remove the of_node_put(np) call to let the device hold the reference.