Multipurpose loop reference leak in Linux Kernel TPS6594 regulator

CVE-2026-93273

What is CVE-2026-93273?

In the Linux kernel's TPS6594 regulator, there exists a vulnerability that results in reference leaks during the multiphase configuration process. The function tps6594_regulator_probe() makes repeated calls to of_find_node_by_name() to identify buck nodes. However, references obtained during these iterations are not appropriately released, leading to potential memory inefficiencies. Additionally, there is a risk of NULL pointer dereference as the absence of null checks for returned node references can cause a crash. Recent fixes have implemented necessary checks and ensured that node references are released after each iteration to mitigate these issues.

References