CVE-2026-89504: regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer
In the Linux kernel, the following vulnerability has been resolved:
regulator: as3722getregulatordtdata: fix premature ofnodeput leaving dangling ofnode pointer
In as3722getregulatordtdata(), ofgetchildbyname() acquires a reference on np, which is then assigned to pdev->dev.ofnode. The function immediately calls ofnodeput(np), releasing the reference and leaving pdev->dev.ofnode as a dangling pointer.
Remove the ofnodeput(np) call to let the device hold the reference.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Apply the kernel fix for “regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer” by removing the of_node_put(np) call in as3722_get_regulator_dt_data() so the device keeps the reference and pdev->dev.of_node is not left dangling.
Event History
Frequently Asked Questions
Which systems should be assessed for exposure?
Assess Linux kernel deployments that use the AS3722 regulator driver with device-tree-based regulator configuration. The issue occurs in the driver's handling of a child device-tree node.
How can I determine whether the issue is present in a kernel source tree?
Inspect as3722_get_regulator_dt_data(). Affected code assigns the node returned by of_get_child_by_name() to pdev->dev.of_node and then calls of_node_put(np); corrected code retains the reference and does not make that call.