power: supply: cros_usbpd-charger: bound the EC-reported port count

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-89471 · Microsoft / collected KEV context

cve-program · CVE-2026-89471

• https://git.kernel.org/stable/c/0b5096f6804161b61451b1cec0e38678630be849
• https://git.kernel.org/stable/c/c46c9f447415ca802afab51dea1eafc08ddff1c6
• https://git.kernel.org/stable/c/a1905375dfc0b9612bbee52fc066e3a70c0d671d
• https://git.kernel.org/stable/c/2746d502b12b343384fb747bdef9cbcfbd7444a2
• https://git.kernel.org/stable/c/fd29d08ee487f3bf50f2575aaa74f78a74b09b21
• https://git.kernel.org/stable/c/78be8b7403ff7638162438b664a07d19da76059e
• https://git.kernel.org/stable/c/3d1e01443b221081258ff34ea0cdd0431e4ff62e
• https://git.kernel.org/stable/c/48355ce49359740f52e94d3623f6fc557ce341f0

No related operational record is retained in the current change model.