CVE-2026-99021

A flaw was found in the Linux kernel's regulator subsystem. A local attacker could exploit this vulnerability to cause a Denial of Service (DoS) by triggering a system crash. When processing bulk regulator requests, the kernel fails to populate the power supply names in the allocated memory array. If a regulator subsequently fails to enable, the error-handling path attempts to access the uninitialized supply name, resulting in an uninitialized memory dereference and a kernel crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.