CVE-2026-93273

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: regulator: tps6594: Fix device node reference leaks in multiphase loop In tps6594_regulator_probe(), the multi-phase configuration loop calls of_find_node_by_name() to find buck nodes by name, and of_get_parent() twice to navigate to the PMIC parent node. None of the acquired node references (np, intermediate parent, np_pmic_parent) are ever released via of_node_put(), causing a reference leak on every loop iteration. Additionally, of_find_node_by_name() can return NULL, but the result was immediately passed to of_node_full_name() and of_get_parent() without a NULL check, which could lead to a NULL pointer dereference. Fix this by: - Adding a NULL check for np after of_find_node_by_name() - Storing the intermediate parent node in a local variable np_parent - Calling of_node_put() on np, np_parent and np_pmic_parent at the end of each loop iteration

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedSep 24, 2026
First seenSep 24, 2026

How to fix

Update
  • Linux Linux28f70e0aa767a8f022c70ed75ecef227dc668121, 4a672bff99f6b58dde419fd12b3a53da137f032d, 68ce4f8223b78f8616ec7f4a02c38988eae627d2, fceac25487b21d6db940d2aed368e465d89cd1f4, 7fd28093b3effc4f92566466df364622830ec608 or later

Affected products

ProductAffected versionsFixed in
Linux Linuxf17ccc5deb4d024bb52fd3433471e77ab7ae9ad8 ≤ v < 28f70e0aa767a8f022c70ed75ecef227dc668121, f17ccc5deb4d024bb52fd3433471e77ab7ae9ad8 ≤ v < 4a672bff99f6b58dde419fd12b3a53da137f032d, f17ccc5deb4d024bb52fd3433471e77ab7ae9ad8 ≤ v < 68ce4f8223b78f8616ec7f4a02c38988eae627d2, f17ccc5deb4d024bb52fd3433471e77ab7ae9ad8 ≤ v < fceac25487b21d6db940d2aed368e465d89cd1f4, f17ccc5deb4d024bb52fd3433471e77ab7ae9ad8 ≤ v < 7fd28093b3effc4f92566466df364622830ec608, 6.528f70e0aa767a8f022c70ed75ecef227dc668121, 4a672bff99f6b58dde419fd12b3a53da137f032d, 68ce4f8223b78f8616ec7f4a02c38988eae627d2, fceac25487b21d6db940d2aed368e465d89cd1f4, 7fd28093b3effc4f92566466df364622830ec608

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-93273 · Linux · Dark Radar