EUVD-2026-76410
GHSA-w8c6-qh9v-m8g2
Severity by source
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Hardware-gated local kernel driver (AV:L/AC:H); interacting with kernel device framework paths after probe requires at minimum unprivileged local access (PR:L), not zero privilege.
Primary rating from Vendor (Linux).
CVSS VectorVendor: Linux
Lifecycle Timeline
6DescriptionCVE.org
In the Linux kernel, the following vulnerability has been resolved:
regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer
In as3722_get_regulator_dt_data(), of_get_child_by_name() acquires a reference on np, which is then assigned to pdev->dev.of_node. The function immediately calls of_node_put(np), releasing the reference and leaving pdev->dev.of_node as a dangling pointer.
Remove the of_node_put(np) call to let the device hold the reference.
AnalysisAI
Dangling pointer in the Linux kernel AS3722 PMIC regulator driver leaves pdev->dev.of_node referencing freed memory after of_node_put() prematurely drops the reference acquired by of_get_child_by_name() during Device Tree parsing in as3722_get_regulator_dt_data(). Systems running the ams AS3722 Power Management IC driver - predominantly NVIDIA Tegra-based embedded platforms - are affected across all kernel versions since Linux 3.13. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the target system to have an ams AS3722 Power Management IC physically installed and the Linux `as3722-regulator` kernel driver loaded (this occurs automatically on compatible Tegra boards). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor-supplied CVSS 3.1 base score of 8.4 with AV:L/AC:L/PR:N/UI:N is materially overstated. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Update to a patched kernel version: Linux 6.12.109, 6.18.50, 7.2.4, or 7.3-rc1. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all NVIDIA Tegra-based systems running Linux kernel 3.13 and later to identify affected deployments and current kernel versions. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today