CVE-2026-93276
kernel: phy: renesas: phy-rcar-gen3-usb2: Fix devm action registration for disabled VBUS regulator
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 24, 2026
Updated · September 28, 2026
Description
A flaw was found in the Linux kernel's Renesas R-Car USB 2.0 PHY driver. A local user could cause a denial of service (DoS) by unbinding or removing the affected device. Because the driver fails to properly register a power regulator cleanup routine during initialization, device removal leaves the regulator in an inconsistent state and triggers a kernel warning condition, which can crash the system if configured to halt on warnings.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-459 · Incomplete Cleanup