The vulnerability in the Linux kernel’s tps6594 regulator driver allows a loop that configures multiphase buck converters to leak device node references because of_node_put() is never called on the nodes obtained by of_find_node_by_name() and of_get_parent(). The loop also fails to test if of_find_node_by_name() returns NULL before using the result, which can lead to a NULL pointer dereference in kernel code. If triggered repeatedly, these conditions can exhaust reference counts, potentially causing kernel crashes or a denial of service.

Any host running a Linux kernel that includes the tps6594 regulator driver, such as devices with Power Management Integrated Circuits that use this driver. No specific kernel releases were identified in the source; the issue applies to all affected kernels until the upstream patch is applied.

The CVSS score is 5.5 and the EPSS score is < 1%. The vulnerability is not listed in the CISA KEV catalog. A local attacker able to influence the regulator configuration or control a device that triggers the multiphase loop typically in a privileged scenario could exploit the flaw. If triggered repeatedly, the missing of_node_put() releases and the unchecked NULL return from of_find_node_by_name() can exhaust reference counts and cause a kernel panic, leading to a denial of service. With a medium‑severity score, the risk is moderate but still warrants timely mitigation.