CVE-2026-93273
Received Received - Intake

Reference Leak in Linux Kernel TPS6594 Regulator Driver

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: regulator: tps6594: Fix device node reference leaks in multiphase loop In tps6594_regulator_probe(), the multi-phase configuration loop calls of_find_node_by_name() to find buck nodes by name, and of_get_parent() twice to navigate to the PMIC parent node. None of the acquired node references (np, intermediate parent, np_pmic_parent) are ever released via of_node_put(), causing a reference leak on every loop iteration. Additionally, of_find_node_by_name() can return NULL, but the result was immediately passed to of_node_full_name() and of_get_parent() without a NULL check, which could lead to a NULL pointer dereference. Fix this by: - Adding a NULL check for np after of_find_node_by_name() - Storing the intermediate parent node in a local variable np_parent - Calling of_node_put() on np, np_parent and np_pmic_parent at the end of each loop iteration

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-25
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-93273
EUVD
EUVD-2026-86145

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a reference leak in the Linux kernel's regulator subsystem for the TPS6594 PMIC. During device probe, a loop calls functions to find and navigate device nodes but fails to release acquired node references. This causes memory leaks on each iteration. Additionally, missing NULL checks could lead to crashes if of_find_node_by_name() returns NULL.

Detection Guidance

This vulnerability is specific to the Linux kernel's regulator subsystem and cannot be directly detected via network commands. It requires kernel-level inspection. Check for kernel logs or dmesg output for regulator-related errors or warnings. Look for repeated regulator probe failures or NULL pointer dereference messages in system logs.

Impact Analysis

The impact is primarily on system stability and resource usage. Memory leaks from un-released node references can gradually exhaust system memory, leading to performance degradation or crashes. Systems using the TPS6594 PMIC with affected kernel versions may experience these issues during device initialization.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA. It is a local kernel reference leak issue in the regulator subsystem that could lead to resource exhaustion but does not involve data exposure or privacy violations.

Mitigation Strategies

Apply the kernel patch that fixes the tps6594 regulator reference leaks. Update to a Linux kernel version that includes the fix for CVE-2026-93273. Monitor system logs for regulator-related errors after applying the patch.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-93273. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart