CVE-2026-90028

A flaw was found in the Linux kernel's usb: typec: hd3ss3220 driver. This vulnerability occurs because the regulator_is_enabled() function reports the overall power regulator state rather than the state specific to a particular consumer. If another component enables the VBUS (Voltage Bus) first, the driver might skip its own enable call and later attempt to release a resource it never acquired. This can lead to an unbalanced regulator disable warning, potentially causing system instability or a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.