CVE-2026-99020

A flaw was found in the Linux kernel's TPS6594 regulator driver. This flaw allows a local user or system process triggering device initialization to cause a Denial of Service (DoS) via an out-of-bounds memory read. The driver specifies more voltage range entries than exist in the descriptor table. When the kernel checks voltage constraints during device registration, it reads past the array boundaries, leading to potential system instability or a kernel crash.

This vulnerability is rated as having a Moderate impact because exploitation is restricted to a local denial of service and requires systems equipped with specific Texas Instruments power management integrated circuit hardware. Standard enterprise deployments of Red Hat Enterprise Linux do not run on platforms containing these PMICs, preventing the affected registration logic from executing. In addition, triggering the driver registration path locally requires elevated administrative access, containing the blast radius to a localized system crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.