CVE-2026-89504High· 8.4▾ TwilightIn the Linux kernel, the following vulnerability has been resolved: regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer In as3722_get_regulator_dt_data(), of_get_child_by_name() acquires …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 46.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 12.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
— → 4.1
none → medium
— → 8.4
none → high
8.4 → 4.1
high → medium
4.1 → 8.4
medium → high
8.4 → 5.5
high → medium
0.2% → 0.2%
Last analysed / modified upstream
5.5 → 8.4
medium → high
In the Linux kernel, the following vulnerability has been resolved:
regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer
In as3722_get_regulator_dt_data(), of_get_child_by_name() acquires a reference on np, which is then assigned to pdev->dev.of_node. The function immediately calls of_node_put(np), releasing the reference and leaving pdev->dev.of_node as a dangling pointer.
Remove the of_node_put(np) call to let the device hold the reference.
Linux >= bc407334e9a6a745de5360395282beb2690adf48 < d9b1407477fb736978b04108073180ca84958936Linux >= bc407334e9a6a745de5360395282beb2690adf48 < bd5606e9da1a01a61c7d2f5df36243414a0142beLinux >= bc407334e9a6a745de5360395282beb2690adf48 < 0bde4f140e90f87ebd49cd9c884c4bb3f19fe931Linux >= bc407334e9a6a745de5360395282beb2690adf48 < eda08b6bd64f01ca9defbfcc9e0c3e30f46cfc02Linux >= bc407334e9a6a745de5360395282beb2690adf48 < d3c1316d84e0a036890b00ae6e4c0b0b80f70c25Linux >= bc407334e9a6a745de5360395282beb2690adf48 < 95342d26f9c6b68a46ab57fa48428a3c4a423dd7Linux >= bc407334e9a6a745de5360395282beb2690adf48 < 8648e29e5c01b6b677c704049189287e27255ccbLinux >= bc407334e9a6a745de5360395282beb2690adf48 < f9324d670ae0b88cbfb0aa48fcaefa5baeb8da4cLinux 3.13Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-68746High· 7.8In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Fix timeout handling When the CPU that the QSPI interrupt handler runs on (typically CPU 0) is excessively busy, it can lead to rare cases of the I…
CVE-2026-98112High· 7.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix listener task lifetime on netdev events The listener thread exits when its listening socket is shutdown
CVE-2026-80995High· 7.8net: mctp: hold a reference to the route device in mctp_route_lookup()
CVE-2025-68265High· 7.8In the Linux kernel, the following vulnerability has been resolved: nvme: fix admin request_queue lifetime The namespaces can access the controller's admin request_queue, and stale references on the namespaces may exist after tearing d…
CVE-2026-98330High· 7.0In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: get the wiphy out of a dying network namespace When a network namespace is destroyed, cfg80211_pernet_exit() moves any wiphy back to the initial namesp…
CVE-2026-100072Medium· 5.5In the Linux kernel, the following vulnerability has been resolved: ACPI: platform: Use acpi_bus_get_primary_device() The acpi_get_first_physical_node() usage in acpi_platform_fill_resource() and acpi_create_platform_device() is genera…