In the Linux kernel, the following vulnerability has been resolved: regulator: of: fill in supply names in of_regulator_bulk_get_all()… (CVE-2026-99021)

The vulnerability in the Linux kernel regulator subsystem was due to of_regulator_bulk_get_all() returning an array where only the consumer field was initialized, leaving supply name fields uninitialized. Since regulator_bulk_enable() expects supply names to be set and prints them on failure, it could dereference uninitialized memory, leading to potential undefined behavior. The fix copies each supply name into the array's own allocation, ensuring the names share the array's lifetime and eliminating reliance on a fixed-size stack buffer that was previously used without proper bounds checking.

The impact involves potential dereferencing of uninitialized memory within the Linux kernel regulator subsystem when handling bulk regulator arrays. This could lead to kernel instability or crashes if regulator_bulk_enable() is called on such arrays. No known exploits in the wild have been reported.

A fix has been implemented in the Linux kernel to properly initialize supply names in the of_regulator_bulk_get_all() function. Users should update to the fixed kernel version containing this patch once available. No additional mitigation steps are indicated.