Strix
26.1K

CVE-2026-64301

UnknownEPSS 0.21%

Last modified

CVE-2026-64301 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: regulator: scmi: fix of_node refcount leak in scmi_regulator_probe() scmi_regulator_probe() calls of_find_node_by_name() which takes a reference on the returned device node. On the error path where process_scmi_regulator_of_node() fails, the function returns without calling of_node_put() on the child node, leaking the reference. Add of_node_put(np) on the error path to properly release the reference.. EPSS estimates a 0.21% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: regulator: scmi: fix of_node refcount leak in scmi_regulator_probe() scmi_regulator_probe() calls of_find_node_by_name() which takes a reference on the returned device node. On the error path where process_scmi_regulator_of_node() fails, the function returns without calling of_node_put() on the child node, leaking the reference. Add of_node_put(np) on the error path to properly release the reference.

Metrics

EPSS Probability
0.21%

10.8th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 0fbeae70ee7ce98e18a47337cd1f205dd88589e9, < 1e446e8f8c763be3de7d0362e024cdf46194ffef; >= 0fbeae70ee7ce98e18a47337cd1f205dd88589e9, < 637c11e3d8d43a7ee654591cda8d17c55a9234fa; >= 0fbeae70ee7ce98e18a47337cd1f205dd88589e9, < e2baf8ea13fb4b10bec2c4751aea05c00dabcd0f; >= 0fbeae70ee7ce98e18a47337cd1f205dd88589e9, < 3e1441a4d06d35a314961e40057bd1f0106bbc14; >= 0fbeae70ee7ce98e18a47337cd1f205dd88589e9, < 22cb337370e6539b0418832c6040e9b00c1b74ca; >= 0fbeae70ee7ce98e18a47337cd1f205dd88589e9, < a935b64548fcfe1d5b4dbdd31dddfb0d7019367f; >= 0fbeae70ee7ce98e18a47337cd1f205dd88589e9, < fa11039d6cdff84584a3ef8cc1f5e1b56e045da2
LinuxLinux5.11

References

Timeline

Published
Last Modified
Status
Awaiting Analysis

Frequently Asked Questions

What is CVE-2026-64301?
In the Linux kernel, the following vulnerability has been resolved: regulator: scmi: fix of_node refcount leak in scmi_regulator_probe() scmi_regulator_probe() calls of_find_node_by_name() which takes a reference on the returned device node. On the error path where process_scmi_regulator_of_node() fails, the function returns without calling of_node_put() on the child node, leaking the reference. Add of_node_put(np) on the error path to properly release the reference.
How severe is CVE-2026-64301?
Severity scoring for CVE-2026-64301 is pending analysis. The EPSS model estimates a 0.21% probability of exploitation in the next 30 days.
How do I fix CVE-2026-64301?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-64301?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST