CVE-2026-89504

Last refreshed2026-10-19

Status: UPDATED | Advisory ID: CVE-2026-89504

Key Details

CVE	CVE-2026-89504
CVSS Score / Version	8.4 (High) / CVSS v3.1
Updated	2026-10-19
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer

In as3722_get_regulator_dt_data(), of_get_child_by_name() acquires a

reference on np, which is then assigned to pdev->dev.of_node. The

function immediately calls of_node_put(np), releasing the reference and

leaving pdev->dev.of_node as a dangling pointer.

Remove the of_node_put(np) call to let the device hold the reference. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-89504
CVE	https://www.cve.org/CVERecord?id=CVE-2026-89504

Source

Reference

NVD

CVE