CVE-2026-64301: regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
In the Linux kernel, the following vulnerability has been resolved:
regulator: scmi: fix ofnode refcount leak in scmiregulatorprobe()
scmiregulatorprobe() calls offindnodebyname() which takes a reference on the returned device node. On the error path where processscmiregulatorofnode() fails, the function returns without calling ofnodeput() on the child node, leaking the reference.
Add ofnodeput(np) on the error path to properly release the reference.
Affected Software
Remediation
Event History
Frequently Asked Questions
What conditions are required to trigger the leak?
The SCMI regulator probe path must find a device-tree child node and then encounter a failure in process_scmi_regulator_of_node(). The vulnerable error path returns without releasing the reference acquired for that node.
What is the practical impact of repeated triggering?
Each affected probe failure leaks a device-node reference. The CVSS vector rates the availability impact as high, indicating that local authenticated exploitation may lead to resource exhaustion.
Is an update available?
Yes. A patch is available that adds of_node_put(np) to release the device-node reference on the affected error path.