regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.14 % · centile 3 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Received
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer In as3722_get_regulator_dt_data(), of_get_child_by_name() acquires a reference on np, which is then assigned to pdev->dev.of_node. The function immediately calls of_node_put(np), releasing the reference and leaving pdev->dev.of_node as a dangling pointer. Remove the of_node_put(np) call to let the device hold the reference.
Références
- https://git.kernel.org/stable/c/d9b1407477fb736978b04108073180ca84958936
- https://git.kernel.org/stable/c/bd5606e9da1a01a61c7d2f5df36243414a0142be
- https://git.kernel.org/stable/c/0bde4f140e90f87ebd49cd9c884c4bb3f19fe931
- https://git.kernel.org/stable/c/eda08b6bd64f01ca9defbfcc9e0c3e30f46cfc02
- https://git.kernel.org/stable/c/d3c1316d84e0a036890b00ae6e4c0b0b80f70c25
- https://git.kernel.org/stable/c/95342d26f9c6b68a46ab57fa48428a3c4a423dd7
- https://git.kernel.org/stable/c/8648e29e5c01b6b677c704049189287e27255ccb
- https://git.kernel.org/stable/c/f9324d670ae0b88cbfb0aa48fcaefa5baeb8da4c
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 8.4 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | Linux |
| CVSS 3.1 | HIGH 8.4 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | NVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary) |
Références européennes
- ENISA EUVD · EUVD-2026-76410
- GCVE · GCVE-0-2026-89504
Avis du CERT-FR
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1375 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1289 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1253 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected bc407334e9a6a745de5360395282beb2690adf48 < d9b1407477fb736978b04108073180ca84958936 ; affected bc407334e9a6a745de5360395282beb2690adf48 < bd5606e9da1a01a61c7d2f5df36243414a0142be ; affected bc407334e9a6a745de5360395282beb2690adf48 < 0bde4f140e90f87ebd49cd9c884c4bb3f19fe931 ; affected bc407334e9a6a745de5360395282beb2690adf48 < eda08b6bd64f01ca9defbfcc9e0c3e30f46cfc02 ; affected bc407334e9a6a745de5360395282beb2690adf48 < d3c1316d84e0a036890b00ae6e4c0b0b80f70c25 ; affected bc407334e9a6a745de5360395282beb2690adf48 < 95342d26f9c6b68a46ab57fa48428a3c4a423dd7 |
| Linux · Linux | affected 3.13 ; unaffected 0 < 3.13 ; unaffected 5.10.270 ≤ 5.10.* ; unaffected 5.15.221 ≤ 5.15.* ; unaffected 6.1.188 ≤ 6.1.* ; unaffected 6.6.157 ≤ 6.6.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |