CVE-2026-89504

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-89504
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89504.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-89504
Downstream
Published
2026-09-11T19:43:52Z
Modified
2026-09-13T03:47:18Z
Summary
regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer
Details

In the Linux kernel, the following vulnerability has been resolved:

regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer

In as3722_get_regulator_dt_data(), of_get_child_by_name() acquires a reference on np, which is then assigned to pdev->dev.of_node. The function immediately calls of_node_put(np), releasing the reference and leaving pdev->dev.of_node as a dangling pointer.

Remove the of_node_put(np) call to let the device hold the reference.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89504.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
bc407334e9a6a745de5360395282beb2690adf48
Fixed
d3c1316d84e0a036890b00ae6e4c0b0b80f70c25
Fixed
95342d26f9c6b68a46ab57fa48428a3c4a423dd7
Fixed
8648e29e5c01b6b677c704049189287e27255ccb
Fixed
f9324d670ae0b88cbfb0aa48fcaefa5baeb8da4c

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89504.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.13.0
Fixed
6.12.109
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.50
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89504.json"