{"id":"CVE-2026-89504","title":"regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nregulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer\n\nIn as3722_get_regulator_dt_data(), of_get_child_by_name() acquires …","severity":"high","cvss":8.4,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-825"],"vendor":"Linux","product":"Linux","affected":["Linux >= bc407334e9a6a745de5360395282beb2690adf48 < d9b1407477fb736978b04108073180ca84958936","Linux >= bc407334e9a6a745de5360395282beb2690adf48 < bd5606e9da1a01a61c7d2f5df36243414a0142be","Linux >= bc407334e9a6a745de5360395282beb2690adf48 < 0bde4f140e90f87ebd49cd9c884c4bb3f19fe931","Linux >= bc407334e9a6a745de5360395282beb2690adf48 < eda08b6bd64f01ca9defbfcc9e0c3e30f46cfc02","Linux >= bc407334e9a6a745de5360395282beb2690adf48 < d3c1316d84e0a036890b00ae6e4c0b0b80f70c25","Linux >= bc407334e9a6a745de5360395282beb2690adf48 < 95342d26f9c6b68a46ab57fa48428a3c4a423dd7","Linux >= bc407334e9a6a745de5360395282beb2690adf48 < 8648e29e5c01b6b677c704049189287e27255ccb","Linux >= bc407334e9a6a745de5360395282beb2690adf48 < f9324d670ae0b88cbfb0aa48fcaefa5baeb8da4c","Linux 3.13"],"published":"2026-09-11","updated":"2026-10-19","sourceUpdated":"2026-10-19T08:47:55.766Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-89504","references":[{"url":"https://git.kernel.org/stable/c/d9b1407477fb736978b04108073180ca84958936"},{"url":"https://git.kernel.org/stable/c/bd5606e9da1a01a61c7d2f5df36243414a0142be"},{"url":"https://git.kernel.org/stable/c/0bde4f140e90f87ebd49cd9c884c4bb3f19fe931"},{"url":"https://git.kernel.org/stable/c/eda08b6bd64f01ca9defbfcc9e0c3e30f46cfc02"},{"url":"https://git.kernel.org/stable/c/d3c1316d84e0a036890b00ae6e4c0b0b80f70c25"},{"url":"https://git.kernel.org/stable/c/95342d26f9c6b68a46ab57fa48428a3c4a423dd7"},{"url":"https://git.kernel.org/stable/c/8648e29e5c01b6b677c704049189287e27255ccb"},{"url":"https://git.kernel.org/stable/c/f9324d670ae0b88cbfb0aa48fcaefa5baeb8da4c"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89504.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-89504"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2532102"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-89504"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89504"},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89504.mbox"}],"tags":["cve.org","csaf","vex","red-hat","score-dispute"],"epss":0.00142,"epssPercentile":0.03451,"scores":{"cna":8.4,"vendor":5.5},"ingestedAt":"2026-09-14T15:23:07.452Z","slug":"CVE-2026-89504","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nregulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer\n\nIn as3722_get_regulator_dt_data(), of_get_child_by_name() acquires a\nreference on np, which is then assigned to pdev->dev.of_node. The\nfunction immediately calls of_node_put(np), releasing the reference and\nleaving pdev->dev.of_node as a dangling pointer.\n\nRemove the of_node_put(np) call to let the device hold the reference.\n\n## Affected\n\n- `Linux >= bc407334e9a6a745de5360395282beb2690adf48 < d9b1407477fb736978b04108073180ca84958936`\n- `Linux >= bc407334e9a6a745de5360395282beb2690adf48 < bd5606e9da1a01a61c7d2f5df36243414a0142be`\n- `Linux >= bc407334e9a6a745de5360395282beb2690adf48 < 0bde4f140e90f87ebd49cd9c884c4bb3f19fe931`\n- `Linux >= bc407334e9a6a745de5360395282beb2690adf48 < eda08b6bd64f01ca9defbfcc9e0c3e30f46cfc02`\n- `Linux >= bc407334e9a6a745de5360395282beb2690adf48 < d3c1316d84e0a036890b00ae6e4c0b0b80f70c25`\n- `Linux >= bc407334e9a6a745de5360395282beb2690adf48 < 95342d26f9c6b68a46ab57fa48428a3c4a423dd7`\n- `Linux >= bc407334e9a6a745de5360395282beb2690adf48 < 8648e29e5c01b6b677c704049189287e27255ccb`\n- `Linux >= bc407334e9a6a745de5360395282beb2690adf48 < f9324d670ae0b88cbfb0aa48fcaefa5baeb8da4c`\n- `Linux 3.13`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · updated 2026-09-18 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89504.json)","depth":"twilight","depthScore":46,"depthScoreParts":{"impact":46.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":224727,"id":"CVE-2026-89504","ts":1792401505984,"field":"cvss","old":"5.5","new":"8.4"},{"seq":224726,"id":"CVE-2026-89504","ts":1792401505984,"field":"severity","old":"medium","new":"high"},{"seq":206944,"id":"CVE-2026-89504","ts":1789749711107,"field":"cvss","old":"8.4","new":"5.5"},{"seq":206943,"id":"CVE-2026-89504","ts":1789749711107,"field":"severity","old":"high","new":"medium"},{"seq":197996,"id":"CVE-2026-89504","ts":1789384321303,"field":"cvss","old":"4.1","new":"8.4"},{"seq":197995,"id":"CVE-2026-89504","ts":1789384321303,"field":"severity","old":"medium","new":"high"},{"seq":183506,"id":"CVE-2026-89504","ts":1789356675648,"field":"cvss","old":"8.4","new":"4.1"},{"seq":183505,"id":"CVE-2026-89504","ts":1789356675648,"field":"severity","old":"high","new":"medium"},{"seq":153296,"id":"CVE-2026-89504","ts":1789285349929,"field":"cvss","old":null,"new":"8.4"},{"seq":153295,"id":"CVE-2026-89504","ts":1789285349929,"field":"severity","old":"none","new":"high"},{"seq":147724,"id":"CVE-2026-89504","ts":1789270212045,"field":"cvss","old":null,"new":"4.1"},{"seq":147723,"id":"CVE-2026-89504","ts":1789270212045,"field":"severity","old":"none","new":"medium"},{"seq":109476,"id":"CVE-2026-89504","ts":1789183732062,"field":"cvss","old":null,"new":"4.1"},{"seq":109475,"id":"CVE-2026-89504","ts":1789183732062,"field":"severity","old":"none","new":"medium"}]}